Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth Porter wrote: > --On Sunday, November 13, 2005 11:26 PM + Craig McLean > <[EMAIL PROTECTED]> wrote: > >> Ok, well if you read my last message, I've indicated a better way than >> appending the whole thing in. Just include it using a line l

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Kenneth Porter
--On Sunday, November 13, 2005 11:26 PM + Craig McLean <[EMAIL PROTECTED]> wrote: Ok, well if you read my last message, I've indicated a better way than appending the whole thing in. Just include it using a line like: include(`/usr/share/sendmail-cf/hack/block_bad_helo.m4')dnl to your sen

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread List Mail User
>... >List Mail User a écrit : > >> You're a lot more polite than I am. I prefer: >> >>my_domain.tld 550 You're lying - Trying to use my host >>.my_domain.tld550 You're lying - Trying to use my host >> >> >I don't wanna risk being sued/beaten by some angry guy:) >

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread Andy Pieters
Hi List Thank you all for your contributions. With kind regards Andy -- Now listening to Alphaville - Forever Young on amaroK Geek code: www.vlaamse-kern.com/geek Registered Linux User No 379093 If life was for sale, what would be its price? www.vlaamse-kern.com/sas/ for free php utilities

Re: Blocking on tld and/or HELO with own domain

2005-11-14 Thread mouss
List Mail User a écrit : You're a lot more polite than I am. I prefer: my_domain.tld 550 You're lying - Trying to use my host .my_domain.tld 550 You're lying - Trying to use my host I don't wanna risk being sued/beaten by some angry guy:) It is also goo

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread List Mail User
>>... >>Note that OUR domain is vlaamse-kern.com and that the sender pretends to be >>vlaamse-kern.com as well! >> >> >you can add an SA rule, but it's easier to block this in the MTA. I >don't use SM, but in postfix, this amounts to creatin a file containing >things like: > >vlaamse-kern.com

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread mouss
[EMAIL PROTECTED] a écrit : Hi Andy, a while ago I changed the MTA to require smtp auth from senders who pretend to be one of our domains. So the mail would get a 5xx type code after the RCTP TO It turned out that some legitimate mail (in particular ebay bids) came in this way and had to be

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread mouss
Andy Pieters a écrit : Hi list We have been receiving a lot of spam from the .jp tld lately. What's more is this: Received: from vlaamse-kern.com (pl027.nas934.d-osaka.nttpc.ne.jp [61.197.82.27]) by giga.vlaamse-kern.com (8.13.1/8.13.1) with SMTP id jADFi1Wo028374 for [EMAIL

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andy Pieters wrote: > On Sunday 13 November 2005 23:06, Craig McLean wrote: >> Andy Pieters wrote: >>> Hi list >>> >>> We have been receiving a lot of spam from the .jp tld lately. What's >>> more is this: >> [snip] >> [Saw this on the fedora list..]

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread hamann . w
>> --nextPart2022869.AdG84hyQal >> Content-Type: text/plain; >> charset="us-ascii" >> Content-Transfer-Encoding: quoted-printable >> Content-Disposition: inline >> >> Hi list >> >> We have been receiving a lot of spam from the .jp tld lately. What's more = >> is=20 >> this: >> >> Received:

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread Andy Pieters
On Sunday 13 November 2005 23:06, Craig McLean wrote: > Andy Pieters wrote: > > Hi list > > > > We have been receiving a lot of spam from the .jp tld lately. What's > > more is this: > > [snip] > [Saw this on the fedora list..] Correct, and the list also sugested to post on spamassassin... > As

Re: Blocking on tld and/or HELO with own domain

2005-11-13 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andy Pieters wrote: > Hi list > > We have been receiving a lot of spam from the .jp tld lately. What's more is > this: [snip] [Saw this on the fedora list..] Andy, As mentioned on the Fedora list, if you want to block by "fake" HELO at the MTA lev

Blocking on tld and/or HELO with own domain

2005-11-13 Thread Andy Pieters
Hi list We have been receiving a lot of spam from the .jp tld lately. What's more is this: Received: from vlaamse-kern.com (pl027.nas934.d-osaka.nttpc.ne.jp [61.197.82.27]) by giga.vlaamse-kern.com (8.13.1/8.13.1) with SMTP id jADFi1Wo028374 for [EMAIL PROTECTED]; Sun, 13 Nov 2