So I am seeing some of this stuff, and I want to block it based on headers.
So here's the header:
Return-Path: <[EMAIL PROTECTED]>
Received: from qmail.example.gov (localhost [127.0.0.1])
by qmail.example.gov (8.13.1/8.13.1) with ESMTP id l7JFvfer015649
for <[EMAIL PROTECTED]>; Sun, 19 Aug 2007 11:57:41 -0400
Received: from qmail.example.gov ([EMAIL PROTECTED])
by qmail.example.gov (8.13.1/8.13.1/Submit) with ESMTP id l7JFvehg015644
for <[EMAIL PROTECTED]>; Sun, 19 Aug 2007 11:57:40 -0400
Received: from host-81-190-191-196.kwidzyn.mm.pl
(host-81-190-188-6.kwidzyn.mm.pl [81.190.188.6])
by qmail.example.gov (Scalix SMTP Relay 11.0.2.17)
via ESMTP; Sun, 19 Aug 2007 11:57:41 -0400 (EDT)
Received: from domusie ([171.155.47.160] helo=domusie)
by host-81-190-191-196.kwidzyn.mm.pl ( sendmail 8.13.3/8.13.1) with
esmtpa
id 1JDKEi-000RGQ-nl
for [EMAIL PROTECTED]; Sun, 19 Aug 2007 18:27:43 +0200
Date: Sun, 19 Aug 2007 18:27:14 +0200
From: "Nives koye" <[EMAIL PROTECTED]>
To: Judi HarveyOld <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Subject: This effectively deletes the in front of the cursor.
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Outlook Express 6.00.2900.3028
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
X-Spam-Status: No, score=1.7 required=2.9
tests=BAYES_00,HELO_DYNAMIC_IPADDR,
HTML_50_60,HTML_MESSAGE autolearn=no version=3.1.8
X-Spam-Level: *
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on
----rest chopped off
Can I do a blacklist_from the *.pl domain? I imagine the *.biz one is not
REALLY going to help me, as it will change in the next spam!!!
Thanks anyone!!
--
View this message in context:
http://www.nabble.com/Headers%3A--What-do-I-block-here--tf4294380.html#a12224676
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
