[EXIM] Autodetecting spammers

Top Page
Delete this message
Reply to this message
Author: Paul Mansfield
Date:  
To: Tom
CC: Philip Hazel, Georg v.Zezschwitz, exim-users
Old-Topics: Re: [EXIM] What about setproctitle?
Subject: [EXIM] Autodetecting spammers

> when the server is very loaded, and I want to see if a particular site is
> abusing Exim. But having exiwhat walk down the process list and
> send


When the rejectlog contains stuff like:
1998-03-16 04:34:06 0yERaw-0002T5-00 rejected from lakelnd1-228.southeast.net
(207.98.200.228) [207.98.200.228]: temporarily unable to verify sender address
(try again later) <YourInternetFriend@???>

It'd be really nice if there was a simple program which would find this and
automagically report spamming attempts to the owner... perhaps it would
be semi-interactive and offer you a default. e.g. in the above case, it would
offer to report the relay blocking to abuse@??? and postmaster@s~t

anybody ever tried this?

else it'd be a chance to practise my Perl hackery again (BTW, anybody try my
single-line-exim-queue printing program - unless Phil is thinking of adding
options for -bp to do it for us?).

Paul
----
P Mansfield, Senior SysAdmin PSINet, +44-1223-577577x2611/577611 fax:577600
"Whatever it was that wasn't wrong and couldn't be reproduced and works like
it always has...has apparently been fixed."... from a fault report.


--
*** Exim information can be found at http://www.exim.org/ ***