Am 2008-06-29 07:07:58, schrieb thadcoco: > servers. Virtually all these emails are being sent from a zombie at a single > IP.
OK
> i.e.: All the messages contain the following line somewhere within:
> Received: from d04m-89-83-98-193.d4.club-internet.fr ([89.83.98.193])
>
> I can't figure out how to mark any messages that originally sourced from
> that IP so that that can be dropped by Procmail (that approach would appears
> to be my only hope, as junk is arriving faster than my mail client can pull
> it off the server.
Procmail?
:0
* ^Received:.*d04m-89-83-98-193.d4.club-internet.fr
/dev/null
No spamassassin needed if it is REALY every time the same IP/FQDN.
And yes, I have a list of arround 200 of them in my cache, since the
$USER (Club Internet, Free, Alice) have a fixed IP which never change.
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature
