Hi -

cgf wrote:

> >Is there a class of spamassassin test we're not using yet?  DNSBL?
> >URLDNSBL?  DCC/Pyzor/etc.?  Can qmail callout-verify MAIL FROM:
> >senders like exim can?
> 
> /var/log/maillog reports blocks due to URIBL_* and blocks due to
> BL_IN_SPAMCOP wouldn't that indicate that both are active?

The DCC/Pyzor/Razor2 stuff is worth adding, if it's not there already.

> qpsmtpd verifies RCPT TO: .  I have some from addresses blocked.  I
> don't know what you mean by callout-verify.

Exim verifies the MAIL FROM: record, by trying to call out to the MX
server for the claimed originator domain, to try to deliver a dummy
message back to the claimed email address.  It can dispose of or mark
email whose originating address was fake.  My spam file contains many
hits of this criterion, which spamassassin can incorporate via bayes
or direct header-testing clauses.

- FChE