Well, if anyone cares, I now have a whitelist up and running and I'm
very happy with it. Configuring exim to use it turned out to be trivial
- happy to tell anyone who's interested (Telewest are having a few
outage issues at the moment so I can't actually post it now).

It remains to be seen whether spammers who successfully fake one of the
addresses on my whitelist will get through - it's early days yet.

I didn't need to tell exim to check the match between sending ip and
hostname - it does that by default.

CC

magnate <chrisc [at] dbass.demon.co.uk>:
> Well, if anyone cares, I now have a whitelist up and running and I'm
> very happy with it. Configuring exim to use it turned out to be trivial
> - happy to tell anyone who's interested (Telewest are having a few
> outage issues at the moment so I can't actually post it now).
>
> It remains to be seen whether spammers who successfully fake one of the
> addresses on my whitelist will get through - it's early days yet.

It's not necessary for spammers to divine your address. All it takes
is one mail to a Windows box. The next virus that scrapes the user's
address book should get you all the crap you can imagine.


--
Any technology distinguishable from magic is insufficiently advanced.
(*) http://www.spots.ab.ca/~keeling Linux Counter #80292
- - http://www.faqs.org/rfcs/rfc1855.html
Spammers! http://www.spots.ab.ca/~keeling/emails.html