blocking mail from

[deltaned]

Hi,

My server had an high load becouse exim was working to hard.
Nu I switch off exim for a few hours, but after starting exim the server will be high loaded again.
(so I switch off again)

I see a lot of mail from 1 domain in the /vas/spool/exim/input dir.
So I will block that one domain, how can I do that?

I install spamassassin with ./spam.sh and untar the transport selection but it doesent help.

Any Tips?

 

[jmstacey]

I believe spamassasin is only for incomming spam, not outgoing.

The best way to stop it would be to notify the user of that domain and suspend his account.

 

[nobaloney]

Suspending the account will not stop outgoing email already in the queue.

It's possible that the user is a spammer. But it's also reasonable that you've got a lot of email in the outgoing queue because you've been accepting a lot of incoming spam for nonexistent users. Installing SpamAssassin won't help.

What will help, if you haven't already done it, and/or if your copy of DA didn't come with it (most recent ones do come with it) is installing the SpamBlocker exim.conf file.

Why? Because the exim.conf file that came with older DA installs accepts all emails and then tries to return undeliverable ones. The latest SpamBlocker eixm.conf file doesn't accept email for nonexistent users, so the queue won't get filled up with undeliverable email.

Note that it's NOT just a dropin replacement, though; be sure to read the instructions at the top of the file, and follow them. Don't forget to restart exim after you've installed the new exim.conf file.

You'll probably also have to delete all the emails in your outgoing email queue. That may lose you some important messages, but hopefully you don't allow your clients to use your outgoing email server, but rather tell them to use their ISP's server.

Jeff