On Wed, 4 Feb 2004 14:22:16 -0600, Jon Gabrielson wrote:

>  Does anyone know of any other way to potentially reduce the
>  initial pre-filtered amount of spam?

Check for virii before calling SA. There's not reason to run SA on a message if 
it's a virus message that should be deleted anyway.

Some stuff to do with the SMTP server, before ever feeding stuff to SA:

Make sure your mailer refuses to receive mail with non exsistant domains in 
MAIL FROM:.
Implement greylisting. It really does block a lot of virii and spam.
Implement cheks for forged HELO pretending to be your server
Use relaydb (the trend towards zombies has made this less effective than it 
was).

I've got an example doing this sort of stuff with MIMEDefang (a sendmail 
milter) at http://whatever.frukt.org. I have no idea how to do it with Exim, 
but hopefully someone else has examples for that.

/Jonas
--
Jonas Eckerman, [EMAIL PROTECTED]
http://www.fsdb.org/

Reply via email to