procmail
[Top] [All Lists]

Please HELP!!!

2000-07-25 11:02:34

Per a previous request, I am MOST DEPARATE for help...now getting over
200 bogus/forged e-mails per day that I can NOT filter on "TO:" or
"FROM:" ... and in most of those cases they are also bogus forgeries.
It all need to go to /dev/null ... and unfortunately that's where
some of this list mail goes if the wrong words are in the body copy.

90% of the time the full header "for <anyunauthorizedname(_at_)xx(_dot_)com> 
comes through on the 3rd line.  But 10% of the time it may be on
either the 4th or 5th line.  Saving legitmate from domain info to
be able to contact those where 20 or 30 bogus registrations or
bogus subscriptions keep coming from to SHUT THEM OFF is also needed.
I got 40 bogus mails in one day from SONY which then necessiated
calling the CEO of Sony and someone in his office is working on the
problem because of the webmaster's failure to respond.

I had my ISP shut off the domain name from any incoming mail for about
2 years because of all the forgeries, but need to use it now for a
special project (NO...we ain't doin' porn here).  Unfortunately, net
perverts have bombarded porn sites with forged @xx.com subscriptions
and the fallout comes in here.

Thank You.


EXAMPLE #1 - The "for <anyunauthorizedname(_at_)xx(_dot_)com>" is on the 3rd 
line.
             This is most typical.

Received: from rhine.modelsoft.com (chang.modelsoft.com [198.139.154.102])
        by winery.garlic.com (8.10.0/8.10.0) with ESMTP id e6PE1sa61828
        for <xx(_at_)xx(_dot_)com>; Tue, 25 Jul 2000 07:01:55 -0700
Received: by rhine.modelsoft.com with Internet Mail Service (5.5.2650.21)
        id <3NW8P2SQ>; Tue, 25 Jul 2000 10:12:17 -0400
Message-ID: 
<C94E47B47922D211A23500A0C9AD44CA09AE8B(_at_)rhine(_dot_)modelsoft(_dot_)com>
From: "ESCPortal.com" <ESCPortal(_at_)ahp(_dot_)com>
To:
Subject: Service Level Report by Product for 07/25/2000


EXAMPLE #2 - The "for <anyunauthorizedname(_at_)xx(_dot_)com" is on the 5th line
----------
Received: from sp1ntb09.atento.com.br (a35005.impsat.com.br
[200.189.226.5]
    (may be forged))
        by winery.garlic.com (8.10.0/8.10.0) with ESMTP id e6PHfca57704
        for <xxx(_at_)xx(_dot_)com>; Tue, 25 Jul 2000 10:41:40 -0700
Date: Tue, 25 Jul 2000 10:41:40 -0700
From: quintus(_at_)atento(_dot_)com(_dot_)br
Message-Id: <200007251741(_dot_)e6PHfca57704(_at_)winery(_dot_)garlic(_dot_)com>
Received: from atento.com.br (QUINTUS_SERVER [10.151.56.10]) by
    sp1ntb09.atento.com.br with SMTP (Microsoft Exchange Internet Mail
Service
    Version 5.5.2650.21)
        id PFLNYT7M; Tue, 25 Jul 2000 14:41:32 -0300



_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>