Craig Whitmore wrote:
>
> ----- Original Message ----- From: "Marc Perkel" <marc@???>
> To: <exim-users@???>
> Sent: Monday, January 09, 2006 5:53 PM
> Subject: [exim] Advanced Regex Exim Tricks
>
>
>> So - how do I do this?
>>
>> I want to look at the received headers, grab the last IP address and
>> look it up in the spamhaus blacklist and block the message if it
>> matches. I know it's tricky, but I'd like to give it a try. Help get
>> rid of some forwarded spam.
>>
>
> The last Received Header will be your own which you can already match
> on RBL Lists.
>
> I've found most spam comes from zombied machines which then won't have
> another Received Header, and if they do it will most likely be falsified.
> If you really want to to get the next one, then your will block emails
> forwarded from aol,hotmail and other forwarding services
> and have unhappy customers..
>
> Thanks
> Craig
>
>
Actually I should clarify. The last one in the $h_Received: variable is
the first received line. It's backwards.
--
Marc Perkel - marc@???
Spam Filter: http://www.junkemailfilter.com
My Blog: http://marc.perkel.com
