On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > Below is the link for one of the spam mail in which to & from address > is same. > http://pastebin.com/f20358d76 > > I can't use RBL because most of my users use datacards & their ip > addresses are listed in RBL in SBL & XBL & SPAMCOP. >
You can still use RBL's. Allow users with SMTP auth only without rbl checks rest you check rbls and reject if listed. I think you use postfix you could do something like this smtpd_recipient_restrictions = permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, ......... ..........(other rules ) And for the smtp-auth mails do not scan for spam at all. Not only will you avoid FP's .. you will also save a lot of processing on your server Thanks Ram PS: Why are you hiding the spammail in the pastebin. The contents of spam mail are usually not very important