i understand it works with a normal email : )
but the thing is, it didn't work when the email body was an attachment : )
i'll send you the original email tomorrow that made it's way through and you
see if you get it.
----- Original Message -----
From: "John Hardin" <[EMAIL PROTECTED]>
To: "Eric Foster" <[EMAIL PROTECTED]>
Cc: "SpamAssassin Users List" <users@spamassassin.apache.org>
Sent: Thursday, October 16, 2008 5:03 PM
Subject: Re: How do i block email with a domain in a message like this?
On Thu, 16 Oct 2008, Eric Foster wrote:
hehe, yes indeed i'm putting the proper domain in : )
in fact here's the actual rule:
uri spam_domains_22
/contendosystems\.com\.ar|fincharacter\.net|efficientx\.info|
gr8rliving\.com|thebuysell\.com|hottomorrow\.com|vrolone\.com|
eastbayventure\.com|bestvalueeducation\.com|theoperate\.com|
daxflackatt\.com|yardsweepersales\.com|petroleumnowhere\.com|
strengthplant\.com|bestbusinessclub\.net|completesuggest\.net|
ardextra\.com|crystalclubonline\.com|moremoneyfor\.net|
entiresuggest\.net|supershoppro\.com|makeownwealth\.net|
southwatercommunity\.com|dvdplusmore\.com|petshowcorner\.com|
hotkeyserver\.net|codsli\.com|ewebzero\.com|greatblessingway\.com|
bikeblessingonline\.com|blessingchurch\.com|blessingchristian\.com|
fareastjourney\.com|besteinternet\.com|newdaymart\.com|
qclearsark\.com|resterkind\.com|ssskeel\.com|windvigourtoday\.com|
yourpening\.com|johnalanonline\.com|angeliemk\.com|
greatwebpro\.com|bestlightfixture\.com|whitepagezone\.com|
ozkcm\.com|lurekeep\.com|scrapinverbs\.com|porcula\.com|
llrcorp\.net|neteigthteenmarketing\.com|gavinder\.org|
incazone\.org|puckstera\.info|cid-212e
fd379931012a\.spaces\.live\.com|rkhei\.com|pudlowmk\.com|
polltill\.org|humderin\.info|singresoup\.info|
greatdifferences\.com|ulinder\.org|bluestreetwear\.com|wuggin\.org|
fishingextremesguide\.com|uptrail\.org|italiancoffeeguide\.com|
schoolsource\.org|theb rakesonline\.com|joetables\.com|
moneachsail\.com|stateshawaii\.com|topnotchwebdeals\.info|
bigcashcreator\.com|rurna\.com|homeibiz\.info/i score spam_domains_22 20
That works in my testbed with a domain picked at random out of the middle.
That list is getting a little long to be manageable. You might want to
look into setting up a local uribl zone on an internal DNS server,
especially if you intend to add domains to that list. There were some
references for how to do this on the list in the past month or so.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...the Fates notice those who buy chainsaws...
-- www.darwinawards.com
-----------------------------------------------------------------------
15 days until Halloween
__________ Information from ESET Smart Security, version of virus
signature database 3528 (20081016) __________
The message was checked by ESET Smart Security.
http://www.eset.com
