Борьба со спамом в MDaemon
Февраль 2014
В файл mdaemon.ini добавляем следующие параметры для проверки PTR и DNS BL:
[ReverseLookup]
InsertLookupHeader=Yes
IPLookup=Yes
HeloLookup=No
HeloCloseIfForged=No
HeloRefuse=No
Helo501=No
HeloShutdown=No
MailLookup=Yes
MailCloseIfForged=No
MailRefuse=Yes
Mail501=No
MailShutdown=No
PTRCloseOnNoneFound=Yes
PTRExemptAUTH=No
PTRCloseOnNoMatch=Yes
[Tarpit]
TarpitPerSession=No
TarpitExemptAuth=Yes
EnableTarpitting=Yes
TarpitThreshold=5
TarpitInterval=60
Scale=1
TarpitIPScreening=Yes
TarpitCloseOnRcptError=Yes
ScreeningThreshold=3
ScreeningInterval=60
TarpitConnections=Yes
ConnectionThreshold=5
ConnectionInterval=1
TarpitAuthErrors=Yes
AuthErrorThreshold=3
DynamicScreenExemptAuth=Yes
EhloDelayExemptAuth=Yes
EHLODelay=5
А в SpamBlck.dat (если файл отсутствует - создаем его в каталоге bin, где и mdaemon.ini) вот это:
# DNS Blacklist Host File
#
# This file lists some hosts which perform IP lookups to see if an
# IP is on their list. The IP will be reformatted and appended to
# the host names listed here and then a DNS lookup will be done.
#
# The format of this file is pretty simple. Each entry is composed of two
# parts - the host to check and a message to display during the SMTP session
# and in the log file if a match is discovered. The $IP$ macro will be replaced
# by the offending IP address if a match is made.
blackholes.uceb.org, mail from $IP$ refused by DNSBL, see http://www.uceb.org
cbl.abuseat.org, mail from $IP$ refused by DNSBL, see http://cbl.abuseat.org
zen.spamhaus.org, mail from $IP$ refused, see http://www.spamhaus.org
bl.spamcop.net, mail from $IP$ refused, see http://www.spamcop.net
sbl-xbl.spamhaus.org, mail from $IP$ refused, see sbl-xbl.spamhaus.org
dnsbl.njabl.org, mail from $IP$ refused by DNSBL, see http://njabl.org/lookup.html
dnsbl.sorbs.net, mail from $IP$ refused by DNSBL, see dnsbl.sorbs.net
sbl.spamhaus.org, mail from $IP$ refused by DNSBL, see sbl.spamhaus.org
dul.dnsbl.sorbs.net, mail from $IP$ refused by DNSBL, see dul.dnsbl.sorbs.net
list.dsbl.org, mail from $IP$ refused by DNSBL, see list.dsbl.org
ex.dnsbl.org, mail from $IP$ refused by DNSBL, see http://www.dnsbl.org
moensted.dk/spam/no-more-funn, mail from $IP$ refused by DNSBL, see moensted.dk/spam/no-more-funn