>From: Daniel J. Luke <dl...@geeklair.net>
>Sent: Friday, May 13, 2016 3:42 PM
>To: David Jones
>Cc: Vincent Fox; users@spamassassin.apache.org
>Subject: Re: understanding HELO_DYNAMIC_IPADDR

>On May 13, 2016, at 4:24 PM, David Jones <djo...@ena.com> wrote:
>> This is a very simple concept and yet most mail admins don't know it or 
>> follow it.

>indeed.

>I haven't measured in a while, but the equivalent of postfix's 
>'reject_unknown_client_hostname' was the single >most-effective anti-spam 
>measure I ever took (I had to stop using it to outright reject mail because of 
>too many false >positives, though).

I did the same thing and it was wonderful but I too had to disable it
due to too many false positives.  You would think that an informative
Postfix bounce message would be very clear to the sender so they
would contact their own IT person to get it fixed.  But no, it was my
fault because I rejected the message.

Now I score RDNS_NONE high (~2 to 3 points) in SA which does almost
the same thing but allows for other negative scores to bring it back
down below the block threshold.  This seems to be a pretty reliable
compromise.

>--
>Daniel J. Luke

Reply via email to