[Pkg-exim4-users] local_sender_blacklist

[Marc Haber]

On Thu, Feb 11, 2016 at 02:51:40PM +0000, Iain Mac Donald wrote:
> I have created the file /etc/exim4/local_sender_blacklist and for
> testing I have created one record:
> *@example.com

It's a fully-fledged exim4 address list, which unfortunately have a
million and one way to do it wrong. See chapter 10 of spec.txt, which
will unfortunately immediately result in a tl;dr.

I generally use regxps, for example:

^bounce at alfa\.globalclicks\.xyz$
^web at expofun\.be$
^bouncers\.[0-9]+ at mailcampaigns\.nl$
^.*@mailservercontrol\.xyz$
^noreply at winstmail\.com$
^bounce-.*@emsrv\.eu$

> I update the configuration and restarted Exim:
> update-exim4.conf
> /etc/init.d/exim4 restart

Changes to local_sender_backlist do not need a restart.

> I checked /var/lib/exim4/config.autogenerated and the
> local_sender_blacklist section is listed.
> 
> Then on a completely different and unrelated server I use swaks to send
> an email which goes to the first server:
> swaks --to me at anotherdomain.com --from me at example.com
> 
> The email is sent and received. Any suggestions as to where I have gone
> wrong?

[3/503]mh at impetus:~$ swaks  --to mh+pkg-exim4-users at zugschlus.de --from web at expofun.be
=== Trying mailgate.zugschlus.de:25...
=== Connected to mailgate.zugschlus.de.
<-  220 torres.zugschlus.de ESMTP Exim 4.84 Thu, 11 Feb 2016 17:11:07 +0100
 -> EHLO impetus.zugschlus.de
<-  250-torres.zugschlus.de Hello impetus.zugschlus.de [2607:ff50:0:4b::100:100]
<-  250-SIZE 41943040
<-  250-8BITMIME
<-  250-PIPELINING
<-  250-STARTTLS
<-  250 HELP
 -> MAIL FROM:<web at expofun.be>
<-  250 OK
 -> RCPT TO:<mh+pkg-exim4-users at zugschlus.de>
<** 550-sender envelope address web at expofun.be is locally blacklisted here. If you
<** 550 think this is wrong, get in touch with postmaster
 -> QUIT
<-  221 torres.zugschlus.de closing connection
=== Connection closed with remote host.
[4/504]mh at impetus:~$

I guess that your wildcard for some reason didn't hold. Try a regexp,
or try to understand exim4 address lists and then by all means explain
them to me ;-)

Greetings
Marc

P.S.: Yes, that's my actual blacklist and yes, those are actual
spammers, so I don't care about exposing their data.

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421