[NTLUG:Discuss] (no subject)

[Dennis]

My virtual server email server has been spoofed.  I am presently receiving
nearly 1 returned email per minute.  

My first attempt was to ask the vendor of the virtual server for guidance,
which I mast say was excellent even though it was not its responsibility. 
They added an SPF record to the DNS server, but unfortunately that is not my
DNS server.  Next I went to my DNS server vendor asking to have an SPF
record installed.  Their response is that they do not install SPF records -
leaving me with the problem.

I have two ideas to hopefully fix the problem:
1)  Change my DNS service from the present vendor over to the VPS vendor to
allow the SPF record to be used, but this will cost a sum of money due to
the fact that I have a multi-year service agreement.
2)  Install SpamAssassin.  This appears to be a good start but I am new to
this and would appreciate some guidance.  My VPS has a simple single click
to install it, but I do not want to run into using it without some guidance.
 If I install it, will it automatically kill everything until I write rules
to allow, or does it do nothing until I write a rule.

Your guidance to using SpamAssassin is appreciated.  I have started the
research, but initially am intimidated by the options.

Any other thoughts that you might have would be very much appreciated.

Dennis

________________________________________________
Message sent using UebiMiau 2.7.9