On Tue, Nov 10, 2009 at 3:57 PM, John Hardin <jhar...@impsec.org> wrote:
> On Tue, 10 Nov 2009, Ralf Hildebrandt wrote:
>
> On Tue, 2009-11-10 at 14:32 +0100, Ralf Hildebrandt wrote:
>>>
>>>> * rahlqu...@gmail.com <rahlqu...@gmail.com>:
>>>>
>>>>> Ok regex is not my strong suit by any means. Trying to get a match for
>>>>> email addresses that start with a pipe character ( about 15% of my spam is
>>>>> this ).
>>>>>
>>>>
>>>> That's not needed. Why are you accepting mail to NON-EXISTING recipients
>>>> at all?
>>>>
>>>
> {snip}
>
>
> He's generating throwaway addresses to find out who's selling these
>> contact addresses.
>>
>
> In that case, depending on the MTA logging, perhaps he could still disable
> catchall and then troll the logs to see which invalid addresses were
> attempted.
>
> ...or does _no_ modern MTA log the recipient addresses it rejects? I
> haven't actually looked... :)
>
>
> --
>
John,
Thanks! Your earlier Regex is in place and doing quite well.
As said before blocking at the MTA would be less resource intensive but I
want the whole message to feed bayes.
The emails that do make it through the specified layout I described before
drop into an account I can search or dump as I wish and sometimes I even eek
out a wanted email, ad, or Pizza coupon (solicited). This all works well and
if I am at a store and they request an email addy it really easy to just
give them one.
As for Ralf and his lightly gruff response, its to be expected when asking
for help on the net and I grew my thick skin 8 years ago asking questions on
setting up SMTP Auth on the Sendmail list. Compared to some of the folks
there Ralf nearly blew me a kiss.
Thanks for all the help and yall be good to each other.
