Покотиленко Костик put forth on 6/10/2010 4:15 AM:

I'd attack the problem from another angle.  You may be better served by adding
some more dnsbl checks rather that fighting spoofs:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a111.67.207.126

As you can see the IP sample you gave is already listed by multiple dnsbls.

> smtpd_delay_reject = yes
> 
> smtpd_client_restrictions =
>     permit_mynetworks,
>     permit_sasl_authenticated,
>     reject_unknown_client_hostname,
>     reject_rbl_client list.dsbl.org,
>     reject_rbl_client zen.spamhaus.org

+       reject_rbl_client b.barracudacentral.org [1]
        reject_rbl_client spam.dnsbl.sorbs.net
        reject_rbl_client recent.spam.dnsbl.sorbs.net
        reject_rhsbl_client dbl.spamhaus.org

> smtpd_sender_restrictions =

+       reject_rhsbl_sender dbl.spamhaus.org

> smtpd_helo_restrictions =

+       reject_rhsbl_helo dbl.spamhaus.org

        
[1] The BRBL is free to use but requires a sign-up:
http://barracudacentral.org/account/register

-- 
Stan

Reply via email to