Blacklist working?

Mike Kercher mike at CAMAROSS.NET
Thu Nov 6 19:02:08 GMT 2003


Why not just block them using /etc/mail/access and REJECT everything from
greenbamboo.net  Then there's no need to worry about what IP they come from.

Mike


> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Max Kipness
> Sent: Tuesday, November 04, 2003 8:03 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Blacklist working?
>
> I added the following entry a few months ago in spam.blacklist.rules:
>
> From:   *@greenbamboo.net                       yes
> From:   support at greenbamboo.net                 yes
>
> I actually had a couple of the support@ entries because they
> continued to come in and my users were requesting that it be
> blacklisted over and over.
>
> Yes, here is a grep of the logs for "greenbamboo" from today.
> Am I doing something wrong in the blacklist? Why are they
> coming through? I know I can block by IP, but is that
> necessary? Also, these guys are using several IPs.
>
>
>
> Nov  4 05:08:16 localhost sendmail[6702]: hA4B8FYi006702:
> from=<support at greenbamboo.net>, size=6944, class=0, nrcpts=1,
> msgid=<1067936379.8835 at mail35.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail35.greenbamboo.net [63.77.17.63]
>
> Nov  4 05:08:45 localhost sendmail[6730]: hA4B8FYi006702:
> to=<ntovell at ourdomain.com>, delay=00:00:30, xdelay=00:00:04,
> mailer=smtp, pri=120332, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067936379.8835 at mail35.greenbamboo.net> Queued mail for
> delivery)
>
> Nov  4 05:27:08 localhost sendmail[7134]: hA4BR7Yi007134:
> from=<support at greenbamboo.net>, size=6944, class=0, nrcpts=1,
> msgid=<1067937511.8284 at mail34.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail34.greenbamboo.net [63.77.17.62]
>
> Nov  4 05:27:25 localhost sendmail[7146]: hA4BR7Yi007134:
> to=<ntovell at ourdomain.com>, delay=00:00:18, xdelay=00:00:00,
> mailer=smtp, pri=120332, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937511.8284 at mail34.greenbamboo.net> Queued mail for
> delivery)
>
> Nov  4 05:29:02 localhost sendmail[7200]: hA4BT1Yi007200:
> from=<support at greenbamboo.net>, size=6955, class=0, nrcpts=1,
> msgid=<1067937625.6380 at mail30.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail30.greenbamboo.net [63.77.17.58]
>
> Nov  4 05:29:30 localhost sendmail[7225]: hA4BT1Yi007200:
> to=<sandrews at ourdomain.com>, delay=00:00:28, xdelay=00:00:05,
> mailer=smtp, pri=120333, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937625.6380 at mail30.greenbamboo.net> Queued mail for
> delivery)
>
> Nov  4 05:33:53 localhost sendmail[7352]: hA4BXqYi007352:
> from=<support at greenbamboo.net>, size=6911, class=0, nrcpts=1,
> msgid=<1067937912.2418 at mail18.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail18.greenbamboo.net [63.77.17.46]
>
> Nov  4 05:34:13 localhost sendmail[7374]: hA4BXqYi007352:
> to=<dlan at ourdomain.com>, delay=00:00:21, xdelay=00:00:01,
> mailer=smtp, pri=120329, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937912.2418 at mail18.greenbamboo.net> Queued mail for delivery)
>
> Thanks,
> Max
>



More information about the MailScanner mailing list