Blacklist working?
Mike Kercher
mike at CAMAROSS.NET
Thu Nov 6 19:02:08 GMT 2003
Why not just block them using /etc/mail/access and REJECT everything from
greenbamboo.net Then there's no need to worry about what IP they come from.
Mike
> -----Original Message-----
> From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Max Kipness
> Sent: Tuesday, November 04, 2003 8:03 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Blacklist working?
>
> I added the following entry a few months ago in spam.blacklist.rules:
>
> From: *@greenbamboo.net yes
> From: support at greenbamboo.net yes
>
> I actually had a couple of the support@ entries because they
> continued to come in and my users were requesting that it be
> blacklisted over and over.
>
> Yes, here is a grep of the logs for "greenbamboo" from today.
> Am I doing something wrong in the blacklist? Why are they
> coming through? I know I can block by IP, but is that
> necessary? Also, these guys are using several IPs.
>
>
>
> Nov 4 05:08:16 localhost sendmail[6702]: hA4B8FYi006702:
> from=<support at greenbamboo.net>, size=6944, class=0, nrcpts=1,
> msgid=<1067936379.8835 at mail35.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail35.greenbamboo.net [63.77.17.63]
>
> Nov 4 05:08:45 localhost sendmail[6730]: hA4B8FYi006702:
> to=<ntovell at ourdomain.com>, delay=00:00:30, xdelay=00:00:04,
> mailer=smtp, pri=120332, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067936379.8835 at mail35.greenbamboo.net> Queued mail for
> delivery)
>
> Nov 4 05:27:08 localhost sendmail[7134]: hA4BR7Yi007134:
> from=<support at greenbamboo.net>, size=6944, class=0, nrcpts=1,
> msgid=<1067937511.8284 at mail34.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail34.greenbamboo.net [63.77.17.62]
>
> Nov 4 05:27:25 localhost sendmail[7146]: hA4BR7Yi007134:
> to=<ntovell at ourdomain.com>, delay=00:00:18, xdelay=00:00:00,
> mailer=smtp, pri=120332, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937511.8284 at mail34.greenbamboo.net> Queued mail for
> delivery)
>
> Nov 4 05:29:02 localhost sendmail[7200]: hA4BT1Yi007200:
> from=<support at greenbamboo.net>, size=6955, class=0, nrcpts=1,
> msgid=<1067937625.6380 at mail30.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail30.greenbamboo.net [63.77.17.58]
>
> Nov 4 05:29:30 localhost sendmail[7225]: hA4BT1Yi007200:
> to=<sandrews at ourdomain.com>, delay=00:00:28, xdelay=00:00:05,
> mailer=smtp, pri=120333, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937625.6380 at mail30.greenbamboo.net> Queued mail for
> delivery)
>
> Nov 4 05:33:53 localhost sendmail[7352]: hA4BXqYi007352:
> from=<support at greenbamboo.net>, size=6911, class=0, nrcpts=1,
> msgid=<1067937912.2418 at mail18.greenbamboo.net>, proto=SMTP,
> daemon=MTA, relay=mail18.greenbamboo.net [63.77.17.46]
>
> Nov 4 05:34:13 localhost sendmail[7374]: hA4BXqYi007352:
> to=<dlan at ourdomain.com>, delay=00:00:21, xdelay=00:00:01,
> mailer=smtp, pri=120329, relay=[64.64.64.64] [64.64.64.64],
> dsn=2.0.0, stat=Sent (
> <1067937912.2418 at mail18.greenbamboo.net> Queued mail for delivery)
>
> Thanks,
> Max
>
More information about the MailScanner
mailing list