Re: tmda, yet still getting spamed

On Sun, Jan 06, 2008 at 10:46:23PM -0500, alexus wrote:

> i do have [email protected], but i though tmda would look at
> "Sndr", not "From", as From: is really easy to spoof

AFAIK, TMDA looks at the envelope sender, which *is* easy to spoof. You
have a couple of choices:

    - Use a more thorough headers recipe, rather than a from recipe.

    - Use a procmail recipe with SPF support before tmda to filter out
      joe-jobs.

    - Use bogofilter on all tmda-accepted mail.

I include both of the following in my own procmail recipes before tmda:

    http://www2.codegnome.org:59321/scripting/showscript.php?script=spf.proc

    http://www2.codegnome.org:59321/scripting/showscript.php?script=hashcash.proc

and feed all results to bogofilter afterwards. TMDA solves one *type* of
spam problem; it is not really a standalone solution.

-- 
"Oh, look: rocks!"
	-- Doctor Who, "Destiny of the Daleks"