Re: [Exim] spam

Top Page
Delete this message
Reply to this message
Author: Tabor J. Wells
Date:  
To: Daniel S. Otis-Vigil
CC: exim-users
Subject: Re: [Exim] spam
On Mon, Jun 12, 2000 at 08:41:10PM -0600,
Daniel S. Otis-Vigil <puppet@???> is thought to have said:

> I recently started filtering domains that spam me repeatedly but I've
> noticed it is often the previous hop that I would like to block. For
> example:
>
> Envelope-to: puppet@???
> Delivery-date: Mon, 12 Jun 2000 19:47:36 -0600
> Return-Path: xellerate@???
> Received: from msa.hinet.net ([168.95.4.211] ident=root)
>     by tray.dynamsol.com with esmtp (Exim 3.14 #1)
>     id 131fnj-000LsQ-00
>     for puppet@???; Mon, 12 Jun 2000 19:47:35 -0600
> Received: from User ([211.72.204.193])
>     by msa.hinet.net (8.8.8/8.8.8) with SMTP id JAA12295
>     for <puppet@???>; Tue, 13 Jun 2000 09:50:10 +0800 (CST)
> From: xellerate@???

>
> rather than block hotmail.com: xellerate in my filter, I'd rather
> block hinet.net because they spam via hotmail.com, yahoo.com,
> mail.com, etc... is there a way to sender_reject the message based
> on a a Received field rather than the From field?


Heh. Got the identical spam not more than 2 minutes ago.

Anyway, the rationality of blocking one of the largest ISPs in Taiwan
aside, why not just refuse connections from 168.95.4.211?

Tabor

-- 
--------------------------------------------------------------------
Tabor J. Wells                                     twells@???
Fsck It!                 Just another victim of the ambient morality