At 04:36 2000-09-03 -0300, Hermann Wecke wrote:
I need to trash all mail sent from these IPs:
checking "received" will mean all mail sent THRU them - not necessarily
arriving to you directly from them, or originating from them. Any
"friendlies" along the way may play interference, and trim the received
headers - say, a mailing list (like dear old procmail USED to - but
thankfully no longer, now that it is in it's new home -- this makes
recieved-checking spam filtering rules work for spam relayed through the
procmail list, where it didn't before because the listserv was all too
happy to remove the received headers up to the point that the list had
acquired the message).
Something like this?
#For a /20 class -> 200.225.144.* to 200.225.159.*
:0
* ^Received: 200\.225\.1[4-5][4-9]
Oh, so 200.225.150-153 isn't to be blocked?
Try:
* ^Received: 200\.225\.1(4[4-9]|5[0-9])
#For the second class I'm a little confused...
:0
* ^Received: 200\.226\.????????
200.226.0/17 (from 200.226.0.* to 200.226.127.*)
* ^Received: 200\.226\.(0|0?[0-9]?[0-9]|1[0-1][0-9]|12[0-7])\.
read:
200.226.0. or
200.226.0-99. (optionally padded with zeroes 000-099) or
200.226.100-119. or
200.226.120-127.
Should be good to go, unless someone picks up any regexp goofs on my part.
---
Please DO NOT carbon me on list replies. I'll get my copy from the list.
Sean B. Straw / Professional Software Engineering
Post Box 2395 / San Rafael, CA 94912-2395
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail