The most recent update is September 17/1999. People with recent
versions of SpamDunk need to download *TWO* files to update.
http://www.interlog.com/~waltdnes/spamdunk/sdfiles/RCVDRC.TXT
and save it as a textfile and upload as rcvdrc in their .nospam
directory
http://www.interlog.com/~waltdnes/spamdunk/sdfiles/NOTLIST.TXT
and save it as a textfile and upload as isnotlist in their .nospam
directory
To download the system in its entirety see instructions at
http://www.interlog.com/~waltdnes/spamdunk.htm
Reasons for update...
1.Checking has been tightened on the IP address in the handoff
header from the external system to your ISP's system. Spammers at
blacklisted IP addresses are occasionally inserting forged
non-blacklisted IP addresses into the HELO string. My filter was
fooled into checking the wrong (non-blacklisted) IP address and
letting spam through. The tighter checking should catch this.
2.The code for walking down the chain of "Received: from" headers
has been split off into the rcvdrc module. It is more elegant, easier
to code, and walks down exactly the right number of headers. The
previous code had a hard coded number, which forced me to build in
overkill.
3.Administrivia
- The IMRSS and DSSL site has been shut down. The lookups for
those services have been removed from the procmail filter.
- The sixpack (actually fourpack now) FAQ webpage has been
updated to reflect changes in my main filter, and should
hopefully remain synchronized now.
- The sixpack FAQ webpage now has the new domain for RBL and
DUL (i.e. mail-abuse.org) listed in the contact addresses.
There has been no change in the nslookup domains for
DUL or RBL as yet. In the near future, the RRSS list is
expected to move over to the mail-abuse.org domain as well.
--
Walter Dnes <waltdnes(_at_)interlog(_dot_)com> procmail spamfilter
http://www.interlog.com/~waltdnes/spamdunk/spamdunk.htm