procmail
[Top] [All Lists]

Re: [Procmail]Bogus IP addresses

1997-03-13 19:33:04
-----BEGIN PGP SIGNED MESSAGE-----

Hi David Bromage!  I'm a UNIX administrator and I like to fight spam!
You may be interested to know that Cyber Promotions is now forging IP
addresses to get through mail filters. If you don't like junk email, add
this to your filter:

        What, just now?  I don't think so.  They've been forging messages 
for a very long time.

* ^Received.*\[[0-9\.]*([03-9][0-9][0-9]|2[6-9][0-9]|25[6-9])

        Ah, that regexp looks seriously flawed.  For one thing, it will 
dump e-mail from EVERY host in the class A netblock of 1 to 9 (0 is a 
wildcard in terms of IP so it isn't used).  Given that Cyberpromo's 
current IP is 207.124.161.49, your recipe is useless.

        Regards,

- -- 
<Doug Muth>--<dmuth(_at_)ot(_dot_)com> - Spam me and die!
Think your homepage sucks?  You haven't seen http://www.ot.com/~dmuth yet!!
Anti-virus software and utils: | The Transformers fanfiction:|"Est Sularus|
http://www.ot.com/~dmuth/virus | http://www.ot.com/~dmuth/tf |oth Mithas!"|
- -=-= The only GOOD spammer is a DEAD spammer * http://www.vix.com/spam -=-=

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Send a blank e-mail to dmuth+help(_at_)ot(_dot_)com for my public key

iQCVAwUBMyi3jx0LJlIsPN1JAQGtIAQAp+A6vO015HHYuN7L0K5KK7KUzKXDqfOc
hBTYhGrhTnEavmNwdyhsXutGjnIHyDKSqmqaGKvCnDgNC46IVoht+mBXjQH/OKqU
wsEosR26RSYJnFa7rOvioJ6rI86V9UQXwMrdQqULnaMcGGt90a+MXimzM5Q7V5n/
9nuuR0VwzwA=
=rDgN
-----END PGP SIGNATURE-----

<Prev in Thread] Current Thread [Next in Thread>