Hi,


I'm having a Linux EL AS 3 running as a mail server (Sendmail). Once I started receiving Spam ,I thought of controlling it and configured Sendmail (in sendmail.mc) to use the RBL this way,


FEATURE(`dnsbl', `list.dsbl.org', `"550 Mail from "$`'&{client_addr} " refused - see http://dsbl.org/"')dnl

FEATURE(`dnsbl', `bl.spamcop.net', `"550 Mail from "$`'&{client_addr} " refused - see http://spamcop.net/bl.shtml/"')dnl

These 2 entries were given and ran the commands

m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf

service sendmail restart


But I couldn't find any of the spam mails blocked.What could have gone wrong? Is there any other way to control the spam.Please give me a solution.


Jomy

first of all view your log file in /var/log/. find out the spam source. then edit the file /etc/mail/access and add the line
From:xx.xx.xx.xx REJECT
here the xx.xx.xx.xx line specifies the ip add: of the source. also you can specify the subnet or fqdn.sava the file and issue the command " make access.db". then restart your service. i hope it would work. bye

No. There is no point in doing that. Every day I get spam from different domains.So even if I add the entry n /etc/mail/access , tomorrow the mails are sent in another domain .So every day I have to do the same process.

Here is what I have in my config


FEATURE(`dnsbl')dnl
FEATURE(`dnsbl', `combined.njabl.org', `"550 Email Rejected - combined.njabl.org"')dnl
FEATURE(`enhdnsbl', `bl.spamcop.net', `"550 Email Rejected - bl.spamcop.net blacklist"', `t')dnl
FEATURE(`dnsbl', `sbl.spamhaus.org', `"550 Email Rejected - sbl.spamhaus.org blacklist"')dnl
FEATURE(`dnsbl', `list.dsbl.org', `"550 Email Rejected - list.dsbl.org blacklist"')dnl
FEATURE(`dnsbl', `unconfirmed.dsbl.org', `"550 Email Rejected - unconfirmed.dsbl.org blacklist"')dnl
FEATURE(`dnsbl', `cbl.abuseat.org', `"550 Email Rejected - cbl.abuseat.org"')dnl

Note that for bl.spamcop.net you need to use the enhdnsbl feature. You need the `t' after the block message as well.

What do you mean you couldn't find them? They are not stored for review anywhere they are just plain rejected before the message can even be recieved.

on the command line as root do this:
grep -i "reject=550" /var/log/maillog

That will show what was rejected w/ the dnsbl's

This seems to work. Thanks for the solution

Jomy