Re: trying to figure out regex for custom_header checks

2015-08-22 Thread Ben Greenfield
> On Aug 21, 2015, at 11:34 PM, Viktor Dukhovni > wrote: > > On Wed, Aug 19, 2015 at 06:44:05PM -0400, Ben Greenfield wrote: > We receive a lot of spam that have very rare top level domains .site, .link, .website, .eu. >>> >>> It is wrong to black TLDs, even if initially they appe

Re: trying to figure out regex for custom_header checks

2015-08-21 Thread Viktor Dukhovni
On Wed, Aug 19, 2015 at 06:44:05PM -0400, Ben Greenfield wrote: > >> We receive a lot of spam that have very rare top level domains .site, > >> .link, .website, .eu. > > > > It is wrong to black TLDs, even if initially they appear to mostly > > send spam. > > It is quick and effective and my t

Re: trying to figure out regex for custom_header checks

2015-08-20 Thread Ben Greenfield
Hello, > On Aug 20, 2015, at 3:14 AM, Christian Kivalo > wrote: > > Hi, > > On 2015-08-20 00:44, Ben Greenfield wrote: >>> On Aug 19, 2015, at 5:43 PM, Viktor Dukhovni >>> wrote: >>> On Wed, Aug 19, 2015 at 04:14:10PM -0400, Ben Greenfield wrote: > First explain the problem, rather than

Re: trying to figure out regex for custom_header checks

2015-08-20 Thread Christian Kivalo
Hi, On 2015-08-20 00:44, Ben Greenfield wrote: On Aug 19, 2015, at 5:43 PM, Viktor Dukhovni wrote: On Wed, Aug 19, 2015 at 04:14:10PM -0400, Ben Greenfield wrote: First explain the problem, rather than the solution. We receive a lot of spam that have very rare top level domains .site, .l

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
> On Aug 19, 2015, at 5:43 PM, Viktor Dukhovni > wrote: > > On Wed, Aug 19, 2015 at 04:14:10PM -0400, Ben Greenfield wrote: > >>> First explain the problem, rather than the solution. >> >> We receive a lot of spam that have very rare top level domains .site, .link, >> .website, .eu. > > It

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Viktor Dukhovni
On Wed, Aug 19, 2015 at 04:14:10PM -0400, Ben Greenfield wrote: > > First explain the problem, rather than the solution. > > We receive a lot of spam that have very rare top level domains .site, .link, > .website, .eu. It is wrong to black TLDs, even if initially they appear to mostly send spa

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
> On Aug 19, 2015, at 4:43 PM, L.P.H. van Belle wrote: > > >> set postix server to check for rfc complaince and you see a spam drop of >> atleast 90% and is that this setting strict_rfc821_envelopes = yese >> setup postscreen with it.. 98% less spam I think I’m using post screen maybe not

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
> On Aug 19, 2015, at 4:23 PM, Alice Wonder > wrote: > > > > On 08/19/2015 01:14 PM, Ben Greenfield wrote: >> >>> On Aug 19, 2015, at 4:08 PM, Viktor Dukhovni >> > wrote: >>> >>> On Wed, Aug 19, 2015 at 04:07:27PM -0400, Ben Gre

Fwd: trying to figure out regex for custom_header checks

2015-08-19 Thread L . P . H . van Belle
> set postix server to check for rfc complaince and you see a spam drop of > atleast 90% and > setup postscreen with it.. 98% less spam > and in above just check for the helo compliance and not hostname checks, that > will drop to many ok servers.. > > greetz > > Louis > > > > > > >

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Alice Wonder
On 08/19/2015 01:14 PM, Ben Greenfield wrote: On Aug 19, 2015, at 4:08 PM, Viktor Dukhovni wrote: On Wed, Aug 19, 2015 at 04:07:27PM -0400, Ben Greenfield wrote: /^Received:\b.*\.eu\b REJECT Is that correct or could someone point out what I'm doing wrong. What you're doing wrong decidi

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
> On Aug 19, 2015, at 4:08 PM, Viktor Dukhovni > wrote: > > On Wed, Aug 19, 2015 at 04:07:27PM -0400, Ben Greenfield wrote: > /^Received:\b.*\.eu\b REJECT Is that correct or could someone point out what I'm doing wrong. >>> >>> What you're doing wrong deciding that all mail fr

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Viktor Dukhovni
On Wed, Aug 19, 2015 at 04:07:27PM -0400, Ben Greenfield wrote: > >> /^Received:\b.*\.eu\b REJECT > >> > >> Is that correct or could someone point out what I'm doing wrong. > > > > What you're doing wrong deciding that all mail from a .eu domain > > should be blocked and trying to block said mai

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
> On Aug 19, 2015, at 4:04 PM, Viktor Dukhovni > wrote: > > On Wed, Aug 19, 2015 at 03:39:32PM -0400, Ben Greenfield wrote: > >> I'm trying to figure out how to block all traffic .eu top level domain but >> I'm blocking everything with eu anywhere in the hostname. >> >> This what I'm using

Re: trying to figure out regex for custom_header checks

2015-08-19 Thread Viktor Dukhovni
On Wed, Aug 19, 2015 at 03:39:32PM -0400, Ben Greenfield wrote: > I'm trying to figure out how to block all traffic .eu top level domain but > I'm blocking everything with eu anywhere in the hostname. > > This what I'm using > /^Received:.*\.eu/ REJECT > > This what I think I should change it

trying to figure out regex for custom_header checks

2015-08-19 Thread Ben Greenfield
Hey All, I’m trying to figure out how to block all traffic .eu top level domain but I’m blocking everything with eu anywhere in the hostname. This what I’m using /^Received:.*\.eu/ REJECT This what I think I should change it to. /^Received:\b.*\.eu\b REJECT Is that correct or could someone