> > Here's the checks I use in my postfix header checks for HSM... They are > a real pain, but with these in place I don't recieve ANY HSM mails any > more (I used to get several per day). Maybe someone would like to put > these checks into SpamAssassin. > > /^From: .*@sendfree\.com/ REJECT Blocked due to spamming > /^From: .*@hi-speedemail\.com/ REJECT Blocked due to spamming > /^From: .*@hi-speedemail\.net/ REJECT Blocked due to spamming > /^From: .*@hsmmailer\.net/ REJECT Blocked due to spamming > /^From: .*@hsmmailer\.com/ REJECT Blocked due to spamming > /^From: .*hispeed*media*\.net/ REJECT Blocked due to spamming > /^From: .*mailerdirect\.com/ REJECT Blocked due to spamming > /^From: .*@tremendousbuys\.com/ REJECT Blocked due to spamming > /^From: .*@acsmsupplies\.com/ REJECT Blocked due to spamming > /^From: .*@hi-speed.*\.com/ REJECT Blocked due to spamming > /^From: .*@top\-special\-offers\.com/ REJECT Blocked due to spamming > /^From: .*c0olmail\.com/ REJECT Blocked due to spamming > /^From: .*cOolmail\.com/ REJECT Blocked due to spamming > /^From: .*coolmail\.com/ REJECT Blocked due to spamming > /^From: .*promotions\.com/ REJECT Blocked due to spamming > /^From: .*promotions\.net/ REJECT Blocked due to spamming > /^From: .*sales-seminar\.com/ REJECT Blocked due to spamming > > Hamish is right - blocking stuff at the MTA level works great. Each time they find a new domain, *plunk* - into the bitbucket it goes, and it never even hits SpamAssassin.
Here's what I have in /etc/postfix/access: #Dumps crap from 9netway.com postmaster@*.9netway.com 550 Die, spammer! #Drop everything from 209.236.57.0/24 209.236.57 550 SPAMBLOCK - SOD OFF SPAMMERS I set up a cron job to run nmap -sP against that /24, just in case the spammers drop it and a legit company picks it up. Currently that entire netblock is owned by spammers, so it can just remain blocked. Hrm. Good idea for a script - something that will check /etc/postfix/access for blocked netblocks, and will inform you if the ARIN registration ever changes. That way the mail admin can manually review it and remove the netblock if necessary. One day when I learn perl, maybe I'll write one. Happy Holidays! -Jonathan ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
