Rejecting Spammers

Mike Kercher mike at vesol.com
Thu Jul 20 17:02:08 IST 2006


I recommend the GreetPause feature of sendmail 8.13.x and milter-sender

Mike


mailscanner-bounces at lists.mailscanner.info <> scribbled on :

> I've posted similar inquiries to sendmail's news group
> without receiving a successful resolution.  I have had
> feedback there but it wasn't something that could be
> implemented without impacting potential customers.
> 
> I, like most everyone else receiving email, receive trash
> where the Received from: only indicates a number.  Sometimes
> the number is negative.  I don't know the significance of the
> number, perhaps it is the ad campaign or the spammer's
> customer number.  I have been using procmail recipes to send
> their crap to /dev/null.  The procmail recipe
> is getting quite long.   In a very large majority of the junk I have
> noticed that the X-Mailer is The Bat! (see last line below).
> Today I added a new section to the recipe that looks to see
> if the X-Mailer line is The Bat! and will be /dev/nulling
> that crap as well.  This is all well and good but it takes
> (ever increasing) cpu cycles to process each message (as the
> recipe gets longer and longer).  I also use sendmail's
> access.db to reject domain names and IP netblocks which is
> more efficient as it turns these morons away at the door with
> an "in your face" message informing them of the rejection.
> Granted these jerks aren't going to care about one rejected
> message.  I take some satisfaction though when I see that
> 7000 plus junk emails have been rejected by the access
> database or by the real time black hole listing services that
> are also part of my sendmail configuration.
> 
> Long story short, does anyone here know of additional methods
> of turning these morons away upon connection rather than
> accepting their junk then having to have procmail examine /
> trash them?
> 
> 
> Two recipes from my .procmailrc file:
> 
>> 0
> * ^Received: from 149051672
> {
>         LOGFILE= $HOME/spammerhiding
>         :0
>         $HOME/spammerhiding.log
> }
> 
>> 0
> * ^X-Mailer: The Bat!
> {
>         LOGFILE= $HOME/thebatcrap
>         :0
>         $HOME/thebatcrap.log
> }
> 
> 
> 
> Received: from -1214334648 ([58.38.104.145])
>         by deleted  (8.11.6/8.11.6) with SMTP id k6KF5Mb16420
>         for <deleted>; Thu, 20 Jul 2006 11:05:23 -0400
> Received: from graphimpressions.com (-1217230040 [-1214449216])
>         by goodstitch.com (Qmailv1) with ESMTP id 91710279CB
>         for <deleted >; Thu, 20 Jul 2006 08:07:33 -0700
> Date: Thu, 20 Jul 2006 08:07:33 -0700
> From: "Conservationists F. Divinest" <dbmaker at graphimpressions.com>
> X-Mailer: The Bat! (v2.00.9) Personal



More information about the MailScanner mailing list