In my case the rule is designed to catch UK recruiters who are always
contacting me.
This isn't the only way I trap spam obviously.
Another thing I just realized is that this only looks for URI's in
the email itself in order to determine if they reside in the UK.
Something different from R
>>
>> Here's the solution I use
>>
>> loadplugin Mail::SpamAssassin::Plugin::URICountry
>>
>> uricountry URICOUNTRY_GB GB
>> header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
>> describeURICOUNTRY_GB Contains a URI hosted in GB
>> tflags URICOUNTRY_
Benny Pedersen wrote:
header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
what if a spammer sends mails from another ip outside GB ?
imho such rules only changes the problem, not solving it :(
URICOUNTRY scores on spams that URIs hosted in a given country rather
than spam tha
On Sat, November 11, 2006 02:31, Robert Nicholson wrote:
> header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
what if a spammer sends mails from another ip outside GB ?
imho such rules only changes the problem, not solving it :(
--
"This message was sent using 100% recycled spam mail
Here's the solution I use
loadplugin Mail::SpamAssassin::Plugin::URICountry
uricountry URICOUNTRY_GB GB
header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
describeURICOUNTRY_GB Contains a URI hosted in GB
tflags URICOUNTRY_GB net
score URICOUNTRY_G
Daryl C. W. O'Shea wrote on Thu, 08 Jun 2006 17:50:33 -0400:
> I agree that outright blocking based on dynamic IP range lists often
> doesn't suite a particular organizations needs. I was just pointing out
> that some people do rely on these lists, often blindly, and that anyone
> who is aware
Kai Schaetzl wrote:
Daryl C. W. O'Shea wrote on Thu, 08 Jun 2006 11:46:48 -0400:
Still, when your ISP isn't responsive
As Chris says you better move away from them then if you can. If you can't
I'd really bother them day and night since I don't get what I paid for. My
Over the years, for
Daryl C. W. O'Shea wrote on Thu, 08 Jun 2006 11:46:48 -0400:
> Still, when your ISP isn't responsive
As Chris says you better move away from them then if you can. If you can't
I'd really bother them day and night since I don't get what I paid for. My
IP range was once listed at SORBS as well, t
> -Original Message-
> From: John D. Hardin [mailto:[EMAIL PROTECTED]
> Sent: Thursday, June 08, 2006 12:33 PM
> To: Greg Allen
> Cc: [EMAIL PROTECTED] Apache. Org
> Subject: RE: is there a way to block email coming from
>
>
> On Thu, 8 Jun 2006, Greg Allen wr
On Thu, 8 Jun 2006, Greg Allen wrote:
> There are a lot of small businesses on these legitimate business
> class DSL lines with fixed IP addresses (which they pay extra for)
> who are very frequently incorrectly listed as "dynamic" IP
> addresses. The vast majority of these small companies are NOT
Kai Schaetzl wrote:
Daryl C. W. O'Shea wrote on Thu, 08 Jun 2006 01:18:11 -0400:
Some even with T1s (probably quietly provisioned over
DSL) that have IPs smack in the middle of static business DSL ranges
that are listed in SORBS' dynamic list.
Nevertheless, it's their ISP's fault and if they
Title: RE: is there a way to block email coming from
> -Original Message-
> From: Greg Allen [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, June 08, 2006 12:05 AM
> To: [EMAIL PROTECTED] Apache. Org
> Subject: RE: is there a way to block email coming from
>
>
&g
John D. Hardin wrote on Wed, 7 Jun 2006 20:41:38 -0700 (PDT):
> The greatest drawback is that using the RBL within sendmail is an
> all-or-nothing proposition. What if you *do* have legitimate
> correspondents in those countries?
You can still whitelist these in access.db.
Kai
--
Kai Schätzl
Greg Allen wrote on Thu, 8 Jun 2006 00:05:12 -0400:
> They probably don't have a full time IT staff.
They don't need one for getting unlisted.
> There are a lot of small businesses on these legitimate business class DSL
> lines with fixed IP addresses (which they pay extra for) who are very
>
Daryl C. W. O'Shea wrote on Thu, 08 Jun 2006 01:18:11 -0400:
> Some even with T1s (probably quietly provisioned over
> DSL) that have IPs smack in the middle of static business DSL ranges
> that are listed in SORBS' dynamic list.
Nevertheless, it's their ISP's fault and if they remain on the li
mail. We on the other hand mark it up and pass it on.
So my rant now is SORBS is starting to suck...
> -Original Message-
> From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, June 07, 2006 10:18 PM
> To: [EMAIL PROTECTED] Apache. Org
> Subject: R
On 6/8/2006 12:05 AM, Greg Allen wrote:
However, the ISP dynamic address tests *do* belong in the MTA RBL
checks. The fraction of legitimate emails received from dynamic-IP
hosts is vanishingly small compared to the tens or hundreds of
thousands of compromised Windows boxen spewing spam and virus
>
> However, the ISP dynamic address tests *do* belong in the MTA RBL
> checks. The fraction of legitimate emails received from dynamic-IP
> hosts is vanishingly small compared to the tens or hundreds of
> thousands of compromised Windows boxen spewing spam and viruses...
>
Sorry to poke in on th
On Wed, 7 Jun 2006, Steven W. Orr wrote:
> On Wednesday, Jun 7th 2006 at 09:53 -0700, quoth John D. Hardin:
>
> =>On Wed, 7 Jun 2006, Screaming Eagle wrote:
> =>
> =>> country, other than USA? How would you look up the network block
> =>> on country such as Romania, China, Taiwan,Thailand, Korea
On Wednesday, Jun 7th 2006 at 09:53 -0700, quoth John D. Hardin:
=>On Wed, 7 Jun 2006, Screaming Eagle wrote:
=>
=>> country, other than USA? How would you look up the network block
=>> on country such as Romania, China, Taiwan,Thailand, Korea, and so
=>> on...
=>
=>describe BL_COUNTRY_TW_1 Mail
You can also block specific ISPs, with varying degrees of reliability.
For example:
describe BL_COUNTRY_FR_2 Mail client in France
header BL_COUNTRY_FR_2 eval:check_rbl('wanadoo-fr',
'wanadoo-fr.blackholes.us')
scoreBL_COUNTRY_FR_2 0.5
tflags BL_COUNTRY_FR_2 net
Wanadoo is a French ISP
On Wed, 7 Jun 2006, Screaming Eagle wrote:
> Is BL_COUNTRY_TW_1 for all country? "Mail client in Taiwan" is an arg value?
> If so, then this Synthax would be o.k:
> describe BL_COUNTRY_TW_1 Mail client in Korea?
Sorry, I assumed you were familiar with the syntax of rules in SA.
> On 6/7/06, John
Is BL_COUNTRY_TW_1 for all country? "Mail client in Taiwan" is an arg value? If so, then this Synthax would be o.k:
describe BL_COUNTRY_TW_1 Mail client in Korea?
Thanks.On 6/7/06, John D. Hardin <[EMAIL PROTECTED]> wrote:
On Wed, 7 Jun 2006, Screaming Eagle wrote:> country, other than USA? How
> country, other than USA? How would you look up the network block on
> country
> such as Romania, China, Taiwan,Thailand, Korea, and so on...
>
> Thanks.
Check out http://countries.nerd.dk/ and http://www.blackholes.us/
On Wed, 7 Jun 2006, Screaming Eagle wrote:
> country, other than USA? How would you look up the network block
> on country such as Romania, China, Taiwan,Thailand, Korea, and so
> on...
describe BL_COUNTRY_TW_1 Mail client in Taiwan
header BL_COUNTRY_TW_1 eval:check_rbl('taiwan', 'tw.countries
25 matches
Mail list logo
