china spam

[Hugo van der Kooij]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Amelein at dantumadeel.nl wrote:
| We're steadily getting more spam from china relayed through legit
hotmail and yahoo servers which is slipping through MailScanner(example
header below).
| Is there any way to combat these ? Just blacklisting anything with an
ip from country X would work too although I don't know what to use to do
this.

.....

| X-Originating-IP: [123.4.35.152]

This might be a usefull line. You might blacklist hotmail email where
the source IP adres lies in certain countries.

To the best of my knowledge several web based email servers use this or
a very similar header.

Combined with the chat I had about ASN detection we might write a custom
function to tacke this.

Another header that might help you a bit:

| To: undisclosed-recipients:;

Personally I let postfix reject messages with this header. It may sound
harsh but it kills a lot of nonsense messages.

Hugo.

PS: Your disclaimer is not legal.

- --
hvdkooij at vanderkooij.org               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

	A: Yes.
	>Q: Are you sure?
	>>A: Because it reverses the logical flow of conversation.
	>>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFINCIiBvzDRVjxmYERAg6pAJ4rjLR4JADHwT8wwWoGiuHU6HRN3ACfVxtQ
NuEK0Agf+gSkjwvfroO6VyQ=
=Lfmi
-----END PGP SIGNATURE-----