procmail
[Top] [All Lists]

RE: From_ and From:

2002-11-21 15:57:20
Tom,

I use blackhole sites already available.  Place the following in your
sendmail.cf


# DNS based IP address spam list sbl.spamhaus.org
R$*                     $: $&{client_addr}
R$-.$-.$-.$-            $: <?> $(dnsbl $4.$3.$2.$1.sbl.spamhaus.org. $: OK $)
R<?>OK                  $: OKSOFAR
R<?>$+<TMP>             $: TMPOK
R<?>$+                  $#error $@ 5.7.1 $: "550 Mail from " $&{client_addr} " 
refused by
spamhaus site sbl.spamhaus.org"

# DNS based IP address spam list spews.relays.osirusoft.com
R$*                     $: $&{client_addr}
R$-.$-.$-.$-            $: <?> $(dnsbl $4.$3.$2.$1.spews.relays.osirusoft.com. 
$: OK
$)
R<?>OK                  $: OKSOFAR
R<?>$+<TMP>             $: TMPOK
R<?>$+                  $#error $@ 5.7.1 $: "550 Mail from " $&{client_addr} " 
refused by
spews site spews.relays.osirusoft.com"

# DNS based IP address spam list blackholes.wirehub.net
R$*                     $: $&{client_addr}
R$-.$-.$-.$-            $: <?> $(dnsbl $4.$3.$2.$1.blackholes.wirehub.net. $: 
OK $)
R<?>OK                  $: OKSOFAR
R<?>$+<TMP>             $: TMPOK
R<?>$+                  $#error $@ 5.7.1 $: "550 Mail from " $&{client_addr} " 
refused by
wirehub site blackholes.wirehub.net"

# DNS based IP address spam list relays.ordb.org
R$*                     $: $&{client_addr}
R$-.$-.$-.$-            $: <?> $(dnsbl $4.$3.$2.$1.relays.ordb.org. $: OK $)
R<?>OK                  $: OKSOFAR
R<?>$+<TMP>             $: TMPOK
R<?>$+                  $#error $@ 5.7.1 $: "550 Mail from " $&{client_addr} " 
refused by
blackhole site relays.ordb.org"


Since Nov. 17, this is the count of spam that was caught:

170 Mails blocked for being Listed as Relays at ordb.org
168 Mails blocked for being Listed on spews.org
103 Mails blocked for being Listed on wirehub.net
945 Mails blocked for being Listed on spamhaus.org
1386 TOTAL Mails blocked as being SPAM



On Thu, 21 Nov 2002, Tom Allison wrote:

TA> If I am going to make a blacklist to block spam.  Which is the
TA> correct tag to use?
TA>
TA> 99.99% of the same they are identical.  I will assume that this is
TA> not exactly going to be 100% identical though they should be...
TA>
TA> Is there any one which is better than the other?
TA> If some is forging headers, what do you look for?
TA>


I started to collect from and _from headers in my spam prior to installing
a black list.  I never did install the black list because the repeat rate
was so low.

Do not filter out unwanted emails.  Filter in wanted emails.  It's an
attitude of mind rather than a rule.



Alan

( Please do not email me AS WELL as replying to the list. Personal
  email is welcome but may invoke a password autoresponder. )



_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail




_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>