dude -- you are SO ready for the open relay database. you sound pretty harried. that's where i was a few months ago. not to sound overly dramatic, but www.ordb.org changed my life.
also, i've been compiling a list of networks that send spam from asian countries like china and korea. when i get 3 pieces of spam from the same network, and my letters of complaint go unanswered, i block the entire network using tcpwrappers. my /etc/hosts.deny contains a vast number of chinese and korean networks. you can manage exim connections with tcpwrappers by simply running exim as: smtp stream tcp nowait mail /usr/sbin/tcpd /usr/sbin/exim -bs in inetd.conf. my 3 pronged approach to spam is: 1. using ordb.org 2. running exim from tcpwrappers and dumping IP's into /ect/hosts.deny 3. spamcop how effective is this? i was getting *upwards* of 40 pieces of spam per day. today i got simply 4 pieces of spam, and this is what i would call a "heavy spam day". pete begin Patrick Kirk <[EMAIL PROTECTED]> > Hi all, > > I have given up on using my .forward as a spam filter because I've now > gone up to over 40 spam pieces a day and its a pain to keep adding > conditions on each .forward on each account. > > Just to make clear, my particular desire to stop stuff from Korean and > Taiwan is that I speak neither Korean nor Chinese. > > > I wonder if anyone can help with these tests: > > 1. I am on numerous Korean spam lists. So I want to exclude all email > with Korean charsets. How do I set $h_Content-Type: contains > "ks_c_5601-1987" to score 20? > > 2. I get a lot of stuff from Taiwan. Is it poossible to simply > blacklist all mail relayed from ISPs with .tw tld? > > 3. How can I blacklist specific names? For example, esavingszone send > me two messages every day and I want them automatically blocked. But > they use differing domain nemaes so I want to block > [EMAIL PROTECTED] [EMAIL PROTECTED] and every other > [EMAIL PROTECTED] > > 4. The ISP that uses hanmail.net and daum.net is the single worst > offender. Can I block all mail relayed theough these domains? > > > Thanks in advance, > > Patrick > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
