On Fri, 22 Aug 2003 10:30:35 -0700, you wrote: >> I personally have been putting in private procmail rules to scrape >> them off into a virus bounce folder. But there are a lot of different >> patterns out there and I am only partially affective. > >yes, I did also find an SA rule that will at least make sure the bounce was >sent in response to a message originating from your server. the problem >here is that if you ever send mail from other places and ever bounce it, >this will catch it. > >body BAD_BOUNCE /The original message was received at >(?!.{10,150}\[129\.116\.190\.)/ >describe BAD_BOUNCE Message was bounced after being sent with forged from >score BAD_BOUNCE 20.0
Take pity on someone who's still trying to learn how to do this - how would I change that rule for an ip address of 209.123.121.28 ? Thanks! Mike- Mornings: Evolution in action. Only the grumpy will survive. ----------------------------------------------------- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at catherders.com. If email from you bounces, try non-HTML, non-encoded, non-attachments. ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk