Ok, Ill give this a try also.
Yes, I require authentication to send and receive emails from the server.

On 6/13/2011 10:48 AM, Eric Shubert wrote:
> Putting your domain's addresses in whitelist_recipients pretty much
> defeats the purpose of spamdyke.
>
> Putting your domain's addresses in whitelist_senders would create a
> nearly open relay, allowing anyone to use your sever as a relay by
> simply knowing one of the addresses. Very bad idea.
>
> Something that's counter intuitive but very effective is to *blacklist*
> your local domain(s) in the blackist_senders file, as such:
> @mydomain.com
> Since all of your users authenticate (they do authenticate, don't
> they?), they pass through spamdyke (or better yet use port 587). Anyone
> attempting to spoof an address at your domain is blocked. This
> accomplishes what the reject-identical-sender-recipient is intended to
> remedy and then some, while still allowing users to send email to
> themselves (which I have a few who do - there's no good reason they
> shouldn't be able to). This works like a charm.
>
_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users

Reply via email to