Subject: restrict relays, use blacklists
If you turn off delivery failures, all those messages will pile up in your mail.box and give you nightmares! What you really want is not to accept connections for those spams at all.
FIRST, be sure you aren’t an open relay (which would give them a RIGHT to blacklist you):
In the Messaging Configuration document, Router/SMTP tab, SMTP Inbound Controls tab, Enter valid relay domains (your own domains) in the field “Allow messages only from the following internet hosts to be sent to external internet domains:”. Restart the mail router. Test at a command prompt:
telnet yourservername 25
HELO youremailaddress@yourdomain
MAIL FROM:
RCPT TO:
DATA
.
QUIT
SECOND, use the blacklists yourself. The configuration below will make it so that you don’t send delivery failures, because you aren’t going to let the spammer’s server even connect to you. The messages will pile up on their server instead. I’ve listed the blacklsits we’re using, but you should research and use the ones that best fit your needs.
In the Messaging Configuration document, Router/SMTP tab, SMTP Inbound Controls tab:
DNS Blacklist filters: Enabled
DNS Blacklist sites: bl.spamcop.net, zen.spamhaus.org
Desired action when a connecting host is found in a DNS Blacklist: Log and reject message
Custom SMTP error response for rejected messages: Message rejected. Your mail server at %s was found in the DNS Blacklist at %s. Please visit their site for removal instructions.
Private Whitelist Filter: Enabled
Whitelist the following hosts: (name of a group in your address book where you list domain names of customers who you never want to blacklist)
Desired action when a connecting host is found in the private whitelist: Silently skip blacklist filters