Покотиленко Костик put forth on 6/10/2010 4:15 AM:
I'd attack the problem from another angle. You may be better served by adding
some more dnsbl checks rather that fighting spoofs:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a111.67.207.126
As you can see the IP sample you gave is already listed by multiple dnsbls.
> smtpd_delay_reject = yes
>
> smtpd_client_restrictions =
> permit_mynetworks,
> permit_sasl_authenticated,
> reject_unknown_client_hostname,
> reject_rbl_client list.dsbl.org,
> reject_rbl_client zen.spamhaus.org
+ reject_rbl_client b.barracudacentral.org [1]
reject_rbl_client spam.dnsbl.sorbs.net
reject_rbl_client recent.spam.dnsbl.sorbs.net
reject_rhsbl_client dbl.spamhaus.org
> smtpd_sender_restrictions =
+ reject_rhsbl_sender dbl.spamhaus.org
> smtpd_helo_restrictions =
+ reject_rhsbl_helo dbl.spamhaus.org
[1] The BRBL is free to use but requires a sign-up:
http://barracudacentral.org/account/register
--
Stan