On Fri, 22 Aug 2003 10:30:35 -0700, you wrote:

>> I personally have been putting in private procmail rules to scrape
>> them off into a virus bounce folder.  But there are a lot of different
>> patterns out there and I am only partially affective.
>
>yes, I did also find an SA rule that will at least make sure the bounce was
>sent in response to a message originating from your server.  the problem
>here is that if you ever send mail from other places and ever bounce it,
>this will catch it.
>
>body BAD_BOUNCE /The original message was received at
>(?!.{10,150}\[129\.116\.190\.)/
>describe BAD_BOUNCE Message was bounced after being sent with forged from
>score BAD_BOUNCE 20.0

Take pity on someone who's still trying to learn how to do this - how
would I change that rule for an ip address of 209.123.121.28  ?

Thanks!

Mike-



Mornings:  Evolution in action.  Only the grumpy will survive.
-----------------------------------------------------

Please note - Due to the intense volume of spam, we have
installed site-wide spam filters at catherders.com.  If
email from you bounces, try non-HTML, non-encoded, 
non-attachments.


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to