Hi,
Ah, yes, it's from that pesky dialsprint.net server. Loads of
spam come from there. And forwarding the messages to
[EMAIL PROTECTED], never works either.
Eric, you'll have to ignore the To: field. It always changes and
it is always fake. The only real part of the header information
is the network IP address within the 'Received From:' field
just above the 'From:' line--not the domain name, because they
can be faked too. Your procmailrc should have the following to
block this particular spam source:
:0
* ? formail -x"Received:"\
| egrep -i "168\.191\."
/dev/null
Good Luck,
L.G.
On Wed, 4 Oct 2000, Eric Clover wrote:
> is there any way to use the procmailrc in /etc to block email that is
> not really sent to whom it says it should be sent to(SPAM)???
> please look at this header:
>
> Return-Path: <[EMAIL PROTECTED]>
> Received: from mx.ama.mpe.co.jp ([203.178.109.34]) by mail.nnex.net
> (8.9.3/8.8.7) with ESMTP id VAA01805 for <[EMAIL PROTECTED]>; Wed, 4 Oct
> 2000 21:19:22 -0500
> Received: from host [168.191.126.152] by mx.ama.mpe.co.jp with ESMTP
> (SMTPD32-4.10) id A1CF40A01C0; Thu, 05 Oct 2000 11:00:47 +090
> From: "Kevin Brokins" <[EMAIL PROTECTED]>
> Subject: Give your Spouse a Lifetime of Income #75A6
> To: [EMAIL PROTECTED]
> X-Mailer: Microsoft Outlook Express 4.72.1712.3
> X-MimeOLE: Produced By Microsoft MimeOLE VÐßD.1712.3
> Mime-Version: 1.0
> Date: Wed, 04 Oct 2000 21:59:38 -0500
> Content-Type:
> multipart/mixed;boundary="----=_NextPart_000_007F_01BDF6C7.FABAC1B0"
> Content-Transfer-Encoding: 7bit
> Message-ID: <20001005110212.SM00131@host>
> Status:
> X-Mozilla-Status: 0000
> X-Mozilla-Status2: 00000000
> X-UIDL: 37586bc300002ccd
>
> ok, to [EMAIL PROTECTED]???
> sorry, my email is [EMAIL PROTECTED]
> i have been getting these for a while
> and have about 30-50 of these kinds of emails.
>
> is there any way to send these to /dev/null if the "To:" does not match
> who it really goes to? by using procmailrc or anything that can do the
> job?
> please help.
>
> note: i work for an isp and have a large user base
> and want to be able to block this spam.
>
> thank you.
> eric
>
>
>
> _______________________________________________
> Redhat-list mailing list
> [EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
>
-- Generated Signature --
Beam me up, Scotty, there's no
intelligent life down here!
-- End Sig --
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
