On Fri, 2008-06-20 at 10:29 -0300, Leonardo Rodrigues Magalhães wrote: > > vodamailshiva escreveu: > > Hi, > > One of spammers is killing our SMTP servers. > > in the content of e-mail, he is mentioning 2 e-mails addresses. > > i need to create a rule to black the spammer. > > he is using [EMAIL PROTECTED], [EMAIL PROTECTED] ,i need > > to black the spam e-mails using content of e-mail. > > > > > if you identified which email addresses the spammer is using as > the sender of the message, block them at the MTA !!
I think he said it was in the content, not the envelope. Something like: body _L_GMAIL_SPAMMER1 [EMAIL PROTECTED] description _L_GMAIL_SPAMMER1 refers to a known spammer body _L_GMAIL_SPAMMER2 [EMAIL PROTECTED] description _L_GMAIL_SPAMMER2 refers to a known spammer meta L_GMAIL_SPAMMERS _L_GMAIL_SPAMMER1 | _L_GMAIL_SPAMMER2 description L_GMAIL_SPAMMERS has at least one spammer e-mail address in the body score L_GMAIL_SPAMMERS 3.0 -- Daniel J McDonald, CCIE #2495, CISSP #78281, CNX Austin Energy http://www.austinenergy.com
signature.asc
Description: This is a digitally signed message part
