On 7. februára 2025 19:42:01 UTC, Philipp Kern via mailop <[email protected]>
wrote:
>(Also the lack of Exim instructions...)
It is really simple, as exim supports all needed, i use somethíng
as this::
# SBL -- UBE (Unsolicited Bulk Email) SPAM
warn
.ifdef SH_DQS_KEY
dnslists = SH_DQS_KEY.zen.dq.spamhaus.net=127.0.0.2
.else
dnslists = zen.spamhaus.org=127.0.0.2
.endif
...
I use SH_DQS_KEY macro for IDkey just to i can simply comment
it to switch all to (legacy) queries (if it is possible), if something
will be wrong.
If SH_DQS_KEY macro is defined, use DQS ZEN zones, else use
(legacy) ZEN zones, and accept only 127.0.0.2 responses -- i use
separate rules for all interested return codes, as i score them
differently, including extra rules with error responses to log errors
loudly. But one can combine multiple return codes into one rule,
eg. my PBL rule:
dnslists = SH_DQS_KEY.zen.dq.spamhaus.net=127.0.0.10,127.0.0.11
See details in exim's docs, you can apply simillar logic to
other zones, eg AuthBL and DBL/ZRD (i apply them to both,
the PTR and EHLO names). Especially AuthBL is usefull on
some SPAM waves (even on MX, where no AUTH is advertised),
it catches about 70 % of its hosts.
Hope this will help you...
regards
--
Slavko
https://www.slavino.sk/
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
