On Sun, 3 Nov 1996, Philip Guenther wrote:
You'll have to describe how to map from the headers of a spam message to
the admin contact. Do you want your .procmail to run the "whois" program,
picking out the Technical Contact field and mail to that? Or are you going
to put a hardcoded list of admins for spams that you generally receive?
I've already done this for the major spamming domains such as cyberpromo and
moneyworld.
I suspect the latter from the recipes you included previously, in which
case I'd suggest not bothering, as the first spam from any given site
will get through. If you reply by hand to that one (sending to the admin)
then add a match for that spammer to your .procmailrc that'll drop future
spams in /dev/null, then you'll have gone to the same amount of work.
Here is my $PMDIR/rc.spam fiel in full.
:0
* ^(From|Received|Message-I).*bulk-e-mail
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated" zrs(_at_)ZRS(_dot_)NET
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*bbbiiizzz
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
ceo(_at_)bbbiiizzz(_dot_)com,postmaster(_at_)bbbiiizzz(_dot_)com,root(_at_)bbbiiizzz(_dot_)com,MAILER-DAEMON(_at_)bbbiiizzz(_dot_)com,bruce(_at_)greatbasin(_dot_)net,thia(_at_)tlg(_dot_)net,dns(_at_)ZRS(_dot_)NET
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*bigprofits
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
postmaster(_at_)BIGPROFITS(_dot_)COM,mike(_at_)CORTLAND(_dot_)COM < /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*(cyberpromo.com|noblock.com|fight4rights.com|1stamend.com|swallace.com|pleaseread.com|sanfordw.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Spam email is not accepted here"
cyberpromo(_at_)CYBERPROMO(_dot_)COM,postmaster(_at_)cryberpromo(_dot_)com,wallace(_at_)cyberpromo(_dot_)com,sanford(_at_)cyberpromo(_dot_)com,abusebot(_at_)cyberpromo(_dot_)com,cyberpr(_at_)ANSWERME(_dot_)COM
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*(savetrees.com|cybermag.com|reedrules.com|emaster.com|randomdomain.com|bulkads.com|gohomeray.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Spam email is not accepted here"
cyberpromo(_at_)CYBERPROMO(_dot_)COM,postmaster(_at_)cryberpromo(_dot_)com,wallace(_at_)cyberpromo(_dot_)com,sanford(_at_)cyberpromo(_dot_)com,abusebot(_at_)cyberpromo(_dot_)com,cyberpr(_at_)ANSWERME(_dot_)COM
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*(bulkads.com|cyber-promo.com|cyberpr0m0.com|cyberprom0.com|cyberpromotions.com|freeconnect.com|promocyber.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Spam email is not accepted here"
cyberpromo(_at_)CYBERPROMO(_dot_)COM,postmaster(_at_)cryberpromo(_dot_)com,wallace(_at_)cyberpromo(_dot_)com,sanford(_at_)cyberpromo(_dot_)com,abusebot(_at_)cyberpromo(_dot_)com,cyberpr(_at_)ANSWERME(_dot_)COM
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I|Reply).*(answerme.com|massemail.com|cyberpromo0.com|bulkemail1.com|bu1kemail.com|208.9.65.)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Spam email is not accepted here"
cyberpromo(_at_)CYBERPROMO(_dot_)COM,postmaster(_at_)cryberpromo(_dot_)com,wallace(_at_)cyberpromo(_dot_)com,sanford(_at_)cyberpromo(_dot_)com,abusebot(_at_)cyberpromo(_dot_)com,cyberpr(_at_)ANSWERME(_dot_)COM
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*(emailsrus.com|hereyougo.com|savepaper.com|nocensorship.com|youvegotmail.com|mailreport.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Spam email is not accepted here"
cyberpromo(_at_)CYBERPROMO(_dot_)COM,postmaster(_at_)cryberpromo(_dot_)com,wallace(_at_)cyberpromo(_dot_)com,sanford(_at_)cyberpromo(_dot_)com,abusebot(_at_)cyberpromo(_dot_)com,cyberpr(_at_)ANSWERME(_dot_)COM
< /dev/null
:0
/dev/null
}
:0
* ^(From|Received|Message-I).*ttalk.com
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
ken(_at_)ttalk(_dot_)com < /dev/null
:0
/dev/null
}
:0
*
^(From|Received|Message-I).*(moneyworld.com|stockpick.com|chag.com|chancellor-group.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
willie(_at_)moneyworld(_dot_)com < /dev/null
:0
/dev/null
}
:0
* ^(From|Received|Message-I).*(natureplus.com|helpnet.com|selfhelpnet.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
willie(_at_)moneyworld(_dot_)com < /dev/null
:0
/dev/null
}
:0
* ^(From|Received|Message-I).*pwrnet.com
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
{
:0 c
| (formail -rkA"X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au" ; cat
$PMDIR/.reject) | \
$SENDMAIL -oi -t; elm -s"Abuse not appreciated"
gjones(_at_)pwrnet(_dot_)com,sysop(_at_)pwrnet(_dot_)com,admin(_at_)pwrnet(_dot_)com,postmaster(_at_)pwrnet(_dot_)com,support(_at_)pwrnet(_dot_)com,webmaster(_at_)pwrnet(_dot_)com
< /dev/null
:0
/dev/null
}
:0
*^(From|Received|Message-I).*(internetmedia.com|total-access.net|owlsnest.com|dpsdirect.com|fireball.blast.net|herpesworld.com|agt.net|ilcom.com|infinet.com|accent.net|magiccorp.com|subweb.com|earthstar.com|earthlink.net|interramp.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(supergood.com|freeview.com|seriousincome.com|admail.net)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(usa.net|florida.usa|easy(_at_)easy(_dot_)com|sftcell.|world2u.|america.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(msinc.com|sundial.net|zrs.net|greatbasin.net|erosnet.com|best.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(erols.com|westworld.|supernews.|huihoa.|internetguy.|juno.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(insideconnect.com|tyrel.net|loop.com|loop.net|tlg.com|tlg.net)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(usaads.com|usa-ads.com|itek.com|profits.com|admail.com|purchase.net)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(resultnet.|l-e-n.|earthlink.|bizimage.com|businesslink.net|brobro.com|freeconnect.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(freeview.com|honeys.com|hotgrrls.com|ibb.com|internetfree.com|luv2cu.com|ntview.com|ntz.com|seemen.com|snappy.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
:0
*^(From|Received|Message-I).*(sweeties.com|sweinc.com|vbox.com|webcreations.com)
*!^X-Loop: dbromage(_at_)metz(_dot_)une(_dot_)edu(_dot_)au
/dev/null
There must be a better way of doing this.
Sending a message to the admin for each spam that you receive is not going
to make the admin your friend, or stop the spammer any faster than one
politely worded message the first time would.
Weasels such as bulk-e-mail, bbbiiizzz, cyberpromo and moneyworld have
already been asked politely, warned firmly and threatened with lawsuits
(Compuserve and AOL actually went ahead and got court orders against
Cyberpromo).
Cheers
David