Thanks for all the replies.
Finn, I do use Fail2ban, so that's another option of ways to deal with
these things. I'll read up on how to do that. I have a system using
fail2ban that I put in a long time ago. It was a recipe for how to block
attacks where if someone tries an attack it first blocks them for a
week, if it persists it adds them to a month, if it still persists it
adds them for a year, and if it still persists is blocks them
permanently. That works great, so something that looks at spam might be
worthwhile as well. I have had limited success blocking full TLDs with
spamassassin, at least the way I have it set up.
Jaime, I have now tested using @ru for a few days and it does indeed
work. You do not need to put in the full domain like @spammer.ru, it
will work on everything if you just put in @ru
Here's an example of that from my logs. In my blacklist_senders, I have
a line like this @living and that's the only reference in any of my
config files to the word "living" and here's a line from my maillog
Jun 12 18:13:18 mail spamdyke[162474]: DENIED_SENDER_BLACKLISTED from:
[email protected] to: .....
So far, putting things in the blacklist_senders seems to be working
fairly well. Now my only concern is how it reacts to having many entries
as I've already got 82 lines in my blacklist_senders file and that's
likely to grow a lot as I add more entries.
I do also want to check into Finn's suggestion of fail2ban to block
country codes.
Thanks as the war on spam continues!
On 6/12/2026 10:38 AM, Qmail wrote:
Hi again,
I remember there was some kind of plugin to Spamassassin to check
location - how it works I don't know or if it exists anymore...
/Finn
Den 10.06.2026 kl. 14.10 skrev Gary Bowling:
I have recently started blocking some top level domains to help
control spam. What I'm doing right now is putting them in the
spamdyke blacklist_senders file, adding a line like this.
@ru
Which would block anything coming from and .ru domain or subdomain.
Is this the right way to do this? Maybe there is a better or more
appropriate way to block TLDs.
Thanks,
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
