Rejecting based on DNS Registrar

[Julian Field]

Personally, I would write a SpamAssassin plugin to do it. Then you can 
use my new "SpamAssassin Rule Actions" setting to delete mail where your 
new rule to call your plugin fires.

Grab a copy of Botnet.pm to start from, it's a very simple module that 
you can easily base your own on.

John Rowan wrote:
> First, this is more a procmail question than a MailScanner one.
> I'm running version 4.21-9 on several old RedHat 9 servers.
> Please don't tell me RH9 is dead, I know it.  Proprietary apps running
> that the software vendor hasn't moved to a later distribution.
>
> With that said, a lot of spam use to be advertising garbage where the
> domain name had been registered through RegisterFly.  Now that
> that problem was taken care of it seems like a good amount of the 
> advertising
> junk is being registered through
> COMPUTER SERVICES LANGENBACH GMBH DBA JOKER.COM
>
> None of the companies we correspond with use joker.com so I'm looking for
> procmail to look in the body of the email to parse any links then see 
> whether
> the name is registered through joker.com and throw it away.
>
> My problem is that I have very basic procmail recipe knowledge and 
> don't know
> how to spawn off to dig or whois to see whether joker.com is the 
> registrar.
> I went to Barnes & Noble (book store) looking for a procmail specific 
> book but
> there was none.
>
>

Jules

-- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk