[Gllug] quick exim question

[Adrian McMenamin]

On Tue, 2005-06-07 at 21:50 +0100, Minty wrote:
> I'm getting a bunch of spam of the type:
> 
> Received: from dynamic.dsl.spammer.relay.thing...
> From: admin at mydomain.com
> To: valid.user at mydomain.com
> 
> and it's sailing right past spamassassin and confusing my mum, as she
> keeps getting emails telling her account is to be terminated.
> 
> The From address can be a variey of things: webmaster@, accounts@ etc.
> 
> None of the spoof'd From addresses are actual valid accounts.


Are legitimate emails from mydomain.com all forwarded from one IP? Or
can there be different IPs?

> 
> Is there a way to tell my exim (v3.35) or procmail (v3.22) or
> spamassassin on Debian Woody to reject/direct mail with a From:
> address that isn't a valid account on my domain to the spam bucket?
> 
> Ideally, somewhere globally that automatically knows about valid users
> on the system so I don't have to maintain a seperate valid users list
> for procmail/exim/sa?
-- 
Adrian McMenamin <adrian at mcmen.demon.co.uk>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: This is a digitally signed message part
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20050607/7de084df/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug