procmail
[Top] [All Lists]

procmail recipe for "spamhaus" and similares

2009-03-01 10:24:40
Hello *,

many years ago I have goten over this  list  a  "spamhaus recipe"  which
worked perfectly, but in the last 2 years  or  something  like  this  it
became less reliabel because for example:

[michelle(_dot_)konzack(_at_)michelle1:~] host 77.252.35.79.zen.spamhaus.org
77.252.35.79.zen.spamhaus.org has address 127.0.0.4
77.252.35.79.zen.spamhaus.org has address 127.0.0.10

and:

----[ '/usr/share/tdtools-procmail/FLT_spamhaus' ]----------------------
      ################ zen.spamhaus.org ################################
            TMPVAR1="zen.spamhaus.org"
            :0
            * ? test "${TDTP_SHOW_FILTERS}" = "true"
            { LOG="${SHOW_FILTER}1 : ${TMPVAR1}${NL}" }
            :0
            { REVCHECKIP=`host ${RECEIVIPREV}.${TMPVAR1} 2>&1 | grep -v 'not 
found.'` }
            :0
            * $ REVCHECKIP ?? 127\.0\.0\.(2|4)
            { IP=`echo ${RECEIVIP} >>${HOME}/log/spamhaus/\`date "+%Y-%m"\`.log`
              STRING="WLIST=${USEWLIST}, HIT=\"${TMPVAR1}\", IP=${RECEIVIP}"
              INCLUDERC=${TDTP_INC}/INC_mailheader_add
              TMPVAR2=`echo ${TMPVAR1} |tr '.' '_'`
              :0
              
${TDTP_SPAM_PREFIX}${TDTP_DATE_PREFIX}${SPAMTAG}.FLT_spamhaus.${TMPVAR2}/
            }
------------------------------------------------------------------------

which has failed on the above IP because it seems, the line

    * $ REVCHECKIP ?? 127\.0\.0\.(2|4)

does not like the two lines retuned and expecting  only  one.  Also  can
"zen" return up to 3 lines of:

Return Codes    Data Source             Contains
127.0.0.2       Spamhaus Block List     Direct UBE sources, spam services and 
ROKSO spammers
127.0.0.4-8     Exploits Block List     Illegal 3rd party exploits, including 
proxies, worms and trojan exploits
127.0.0.10-11   Policy Block List       Non-MTA IP address ranges set by 
outbound mail policy.

Any suggestions?

Thanks, Greetings and nice Day/Evening
    Michelle Konzack
    Systemadministrator
    24V Electronic Engineer
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
<http://www.tamay-dogan.net/>               <http://www.can4linux.org/>
Michelle Konzack   Apt. 917                  ICQ #328449886
+49/177/9351947    50, rue de Soultz         MSN LinuxMichi
+33/6/61925193     67100 Strasbourg/France   IRC #Debian (irc.icq.com)

____________________________________________________________
procmail mailing list   Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>
  • procmail recipe for "spamhaus" and similares, Michelle Konzack <=