We have opened a public list of regular expressions that are designed to match 2 different criteria.
1) Addresses which match DUL Forms, ie xxx.xxx.xxx.pool.adsl.domain.com 2) Addresses which match a source which has been reported as sending unsolicited bulk mail (NON-DUL) In MagicMail Systems, this rule is treated as an absolute rule on the STRICT settings, (DUL Regex Match) rather than a scoring method, and is handled at the SMTP layer, by doing a reverse resolution of the sendor IP Address. Although we are aware that this can stop mail from legitimate mail servers, who are improperly configured.. (And I mean in the general sense. "Best Practises for operating a Mail Server" documents by MAAWG and other Anti-Spam task forces all indicate that a server generating emails should have a reverse DNS resolution which represents the responsible party, ie mail servers or gateway in front of mail servers should not resolve to a DUL style address of their provider) .. other mail servers may benifit from this collaborative effort. If someone is interested in testing the list of regular expressions for HAM/SPAM, and see it's validity as a rule for use in SA, please feel welcome. You can generate lists of either the DUL or NON-DUL forms from the following URL, and feel free to contribute other entries as well. http://www.linuxmagic.com/opensource/anti_spam/dynamic_regex The lists are regularly updated, and you can choose to generate 'tested', 'testing' or 'user contributed' entries. This is a fairly new public tool, and we are interested in all input. However, it has been very helpful in identifying new Bot Generated Spam from infected PC's on DUL Networks worldwide. -- "Catch the Magic of Linux..." -------------------------------------------------------- Michael Peddemors - Senior Systems Developer LinuxAdministration - Internet Services NetworkServices - Programming - Security Wizard IT Services http://www.wizard.ca Linux Support Specialist - http://www.linuxmagic.com LinuxMagic is a Registered TradeMark of Wizard Tower TechnoServices Ltd. -------------------------------------------------------- (604)589-0037 Beautiful British Columbia, Canada This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error please notify the system manager. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company.
