Hello,
Yeah, I too have notice A LOT of spam originating from ComCast
networks lately.
You could implement SPAMDOMAINS that would check the "from" and
where the message came from to add weight to the message. Seems to work
well when you don't get DNS timeouts (which I have been having problems with
lately).
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul Fuhrmeister
Sent: Thursday, April 22, 2004 10:12 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Comcast.net Spam
An email is "from" [EMAIL PROTECTED] [24.5.121.88] AND was received
from cib.co.za (c-24-5-121-88.client.comcast.net [24.5.121.88]
Is there a way to add weight when
- received from client.comcast.net BUT sender is not "@comcast.net"
Here are example headers:
Received: from cib.co.za (c-24-5-121-88.client.comcast.net [24.5.121.88])
by mail17.**********.com (Postfix) with SMTP id 858D630F4B;
Wed, 21 Apr 2004 21:25:31 -0500 (CDT)
(envelope-from [EMAIL PROTECTED])
Message-ID: <[EMAIL PROTECTED]>
From: "Tim Salazar" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: Pain Pills V.icodin Hy.drocodone Lortab Lorcet Norco
Date: Thu, 22 Apr 2004 01:00:15 +0000
MIME-Version: 1.0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: 8bit
X-RBL-Warning: DSBL: "http://dsbl.org/listing?ip=24.5.121.88";
X-RBL-Warning: BLOCKTEXT: Message failed BLOCKTEXT test (line 394, weight 7)
X-Declude-Sender: [EMAIL PROTECTED] [24.5.121.88]
X-Declude-Spoolname: D2d2c2f4000be40bf.SMD
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 1049636097
Paul Fuhrmeister
[EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
