Challenge-response (one component of TMDA) is an insane idea unless you are
certain that [1] you'll never challenge an innocent third party (hint-- you
will) and [2] people want to give you their business so much that they'll
accept having to jump through some hoops to do so (hint-- they won't).
Thanks for the quick reply. My employer likes the
challenge-response system, which we use for some of our current
in-house email addresses (hosted elsewhere), and we'd like to offer
it to our clients (we host about 15 websites with corresponding
email accounts) on an "opt-in" basis, not force it blindly across
the board.
It doesn't matter if you're just offering people bathwater with their
wine, it's still woolly thinking.
At the risk of sounding like Dan, a well-configured Exim setup plus a tuned
SpamAssassin install should allow you to safely reject 99% of incoming spam
and tag the remainder for special handling. (I don't quite share Dan's faith
in sender callout verification, however; I've found I have to add 1-2 legit
senders a week to my exempt-from-verification list as some legit bulk mail
will otherwise fail that test.)
Spam is best handled when it's never accepted. This can occur through
a variety of tests before you accept the message. Exim excels at this.
If you want very, very strong message discrimination, after it's been
accepted into the system, you might want to look at CRM-114 instead
of SA.
I'd love to hear more about your Exim-foo because, frankly, we are
getting a lot of spam right now, even after following Apple's (may I
interject: pretty shallow) Mail Services guide. I've moved the
SpamAssassin slider down a couple of ticks, but this doesn't really
seem to make a difference...
Because it's a filter, and you need good criteria to filter on. Train
SA better.
iWiring provides systems and networks support for Mac OS X, unix, and
Open Source application technologies at affordable rates.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden