procmail
[Top] [All Lists]

Stoping Kornet und ADSL $USER sending me messages directly

2004-11-24 09:24:31
Hello all, 

first off all: since 3 weeke I get every day between 500 and 7000 SPAMs
from Kornet (Korean Telecom). Now I block all which send me E-Mails
directly to my Account with:

  ____( '/home/michelle/.procmail/FLT_kornet' )_________________________
 /
| ####################################################################
| # 
| # FLT_kornet
| # 
| ####################################################################
| 
| LOG="FLT_kornet     : pass
| "
| 
| :0 H
| * ^Received: from.*\[.*\](.*$)+Received:.*\[222+\.[0-9]+\.[0-9]+\.[0-9]+
| ATTENTION/Blocked_Kornet/
 \______________________________________________________________________

and it works perfectly ;-)

Now I try to setup a second filter to get the ADSL-Users which send
my daily around 300-1000 SPAMs

  ____( '/home/michelle/.procmail/FLT_adsl' )___________________________
 /
| ####################################################################
| # 
| # FLT_adsl
| # 
| ####################################################################
| 
| LOG="FLT_adsl       : pass
| "
| 
| :0 cH
| * ^Received: from.*\[.*\](.*$)+Received: from.*(dsl|pool.)
| ATTENTION/Blocked_ADSL/
 \______________________________________________________________________

and it does not work...

I like to filter the FQDN of the second Received: header because the
SPAMers I have found in my spamassassin folder seindig from dynamic
IP's which has FQDN. 

So I need to filter for "dsl" or "pool." in the FQDN

Why does the second filter not work ?

It does filter messages without the "dsl" string, exactly I get all
10 minutes around 12 Messages via fetchmail and 3-6 are filtered to
the "Blocked_ADSL" Folder without reason...

Thanks
Michelle

-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/ 
Michelle Konzack   Apt. 917                  ICQ #328449886
                   50, rue de Soultz         MSM LinuxMichi
0033/3/88452356    67100 Strasbourg/France   IRC #Debian (irc.icq.com)

Attachment: signature.pgp
Description: Digital signature

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail