On Fri, 16 Nov 2018, Bill Cole wrote:
On 15 Nov 2018, at 14:27, MarkCS wrote:
So I've been tasked with researching an issue with the mail server at work.
We use Spamassassin and at present, it's not blocking some pretty obvious
spam, largely from the domain qq.com. Basically email is slipping through,
being bounced back at the end receiving server, then our server tries to
bounce back to qq.com, which doesn't exist at that point and we get a
bounce
message. Hundreds of these suckers are coming through daily.
As John said, absolutely blocking a whole domain is best done before
SpamAssassin, in the MTA (in your case that looks like Postfix.)
In fact, all of John's reply was good. There's one thing he was probably too
polite to mention though...
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on <ourserver>
Eh, no, I don't particularly focus on that detail...
Good point, though.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
From the Liberty perspective, it doesn't matter if it's a
jackboot or a Birkenstock smashing your face. -- Robb Allen
-----------------------------------------------------------------------
596 days since the first commercial re-flight of an orbital booster (SpaceX)