On Thu, 22 May 1997, John Bolding wrote:
> I think all of us need a repository of spam sender addresses so that
> we can block as much of it as possible. Perhaps another list?
>
> One recent comment to this thread said their site was blocking 30 new
> spammers per week. That we postmasters have to resort to this
> is totally disgusting. At FirstBase, we get about 3-4 per day,
> and we block those as quickly as possible.
>
We are to the point where we are blocking thousands of spam messages a day,
and the majority of the blocking is done by only a few simple filters, so
for everyone's enjoyment, here are the most useful filters from our system
filter file...
$h_to: contains "internetusers@???" or
$h_to: contains "Friend@???" or
$h_to: contains "you@" or
$h_to: contains "@Yourdomain.com" or
$h_from: contains "noreply@" or
$h_X-mailer: contains "Avalanche" or
$h_X-mailer: contains "Floodgate" or
$h_X-mailer: contains "e-Merge for Windows" or
$h_X-mailer: contains "NetMailer" or
$h_x-mailer: contains "Extractor Pro" or
$h_x-sender: contains "Extractor Pro" or
$h_X-mailer: contains "bulk mailer" or
$message_body contains "you by Dynamic Mail - the easier" or
The x-mailer and x-sender rules catch an amazingly huge number of spams along
with the "friend@???" rule, which seems to be a popular to line for
spammers for some reason...
Jason Kohles -- System Administrator -- XMission Internet Access
robobob@??? (at work) robobob@??? (at play)
"Someone who thinks logically is a nice contrast to the real world."
