Hello.!
I'm getting a lot of spam from ".bid" domains. and I want to block it.
I have created the following rule but discard emails that contain the letters
"bid". (example giturb...@domain.com)
discardcondition = ${if match{$sender_address:}{(?!.*(\.bid))}}
logwrite = R
On 24/11/17 11:57, Emanuel Gonzalez wrote:
> I'm getting a lot of spam from ".bid" domains. and I want to block it.
>
>
> I have created the following rule but discard emails that contain the letters
> "bid". (example giturb...@domain.com)
"Containing" may be an issue. Currently you're only lo
Hello.! thanks for your reply.
I do not want to block local users but incoming spam.
Regards,
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Hi, Emanuel -
The problem is that you are making a huge assumption: that all emails from
any something@*.bid sender address will be spam.
If you're really sure you want to assume this and that there will never be
any legitimate email from such an address then it is better do deny rather
than disc
Mike has hit the nail on the head.
As an additional tip, I found for those cheap domains (like .win, .top
etc), using a combination of slightly weighted scoring on the domain
name and SpamAssassins relay geoip module, I was able to eliminate
most spam relatively easily. You'll probably notice that
I use the deny sender_domains to block the tld ".bid".
Thanks for your help.!!
Regards,
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
