spam ips from .co domain are changing.
I have .co domain inside file /etc/blocked_incoming_email_domains, and all spam is blocked without exception.
I have this accumulated list from long time ago and all messages are rejected. And no complaints from customers about missed messages
Code:
*.accountant
*.bid
*.biz
*.business
*.buzz
*.cam
*.cf
*.christmas
*.click
*.club
*.co
*.co.kr
*.country
*.cricket
*.cyou
*.date
*.desi
*.durban
*.faith
*.fit
*.fun
*.ga
*.gdn
*.gq
*.gr
*.icu
*.kim
*.life
*.live
*.loan
*.lol
*.men
*.ml
*.mom
*.monster
*.nagoya
*.ninja
*.okinawa
*.online
*.ooo
*.pro
*.racing
*.review
*.rocks
*.site
*.space
*.stream
*.tel
*.tk
*.today
*.top
*.us
*.webcam
*.win
*.work
*.world
*.xyz
*.zip
just save inside /etc/blocked_incoming_email_domains , and rebuild and restart:
# /scripts/buildeximconf; service exim restart
log rejection messages are like "Sender domain is banned"
hope it helps