James Myers wrote:
Hello list,
I am not sure if this is where I need to ask this question, but my back is against the wall and I really need some assistance.
I am using an older version of the Shupp qmail toaster on Redhat 8.0 and have Spamassassin and qmail scanner both installed. I have a number of Spammers trying to use bogus account names from listed domains. Apparently they have had some success because my server ip address has been added to the Orbs list and several other email ban list as well.
I have been adding bogus domains to the Rejected Recipients in qmail itself and bogus email addresses Spamassassin and still have a lot of spam get through. Even on rejected domains (example: china.com). Is there a way I can ban by ip address? Does anyone have some suggestions as to what I can do to stop this issue or at least slow spammers down a bit?
Thanks James
You can can add the file badmailfrom in /var/qmail/control directory and
insert the ip addresses there. This only works if the spammers don't
lie about their sending domain. There's a nice big list here of
blacklists that I just started using
http://www.stearns.org/sa-blacklist/ (scroll way down to Qmail). Dump his file into badmailfrom and add your own. See if that works.
He also has some custom spamassasin rule sets that I also started using with more here:
http://wiki.apache.org/spamassassin/CustomRulesets