>Speaking of roadrunner.  Has anyone got a good list of known subscriber
>patterns for them?  Seems as though they maintain some funky dns names

charter.com is even worse, not systematic at all.

here's how to look for all of charter.com PTRs:

zegrep -i " connect from.*\.rr\.com" /var/log/maillog.1.gz | awk '{print=20
$8}' | sort -f | uniq -i | sort -t[ -k2 > /var/tmp/rrptr.txt

This part is easy:

           \.rr\.com

:))    then, it's downhill from there.


biz.rr.com should be given the benefit of the doubt and not blanket=20
blocked  (but they are not innocent)

these certainly are subscribers

(^dhcp.*|^net.*|^cpe.*)\.rr\.com

but that doesn't catch them all.

Their MTAs seem to be:

[EMAIL PROTECTED] lconrad]# egrep -i smtp /var/tmp/rrptr.txt
nycsmtp3out.rdc-nyc.rr.com[24.29.99.224]
ms-smtp-03.nyroc.rr.com[24.92.226.153]
ms-smtp-02.nyroc.rr.com[24.92.226.49]
ms-smtp-01.texas.rr.com[24.93.36.229]
ms-smtp-02.texas.rr.com[24.93.36.230]
ms-smtp-03.texas.rr.com[24.93.36.231]
ms-smtp-01.southeast.rr.com[24.93.67.82]
ms-smtp-02.southeast.rr.com[24.93.67.83]
ms-smtp-03.southeast.rr.com[24.93.67.84]
ms-smtp-02.rdc-kc.rr.com[24.94.166.122]
ms-smtp-03.rdc-kc.rr.com[24.94.166.129]
ohsmtp01.ogw.rr.com[65.24.7.36]
ohsmtp02.ogw.rr.com[65.24.7.37]
ohsmtp03.ogw.rr.com[65.24.7.38]
ms-smtp-04.tampabay.rr.com[65.32.1.35]
ms-smtp-02.tampabay.rr.com[65.32.1.39]
ms-smtp-03.tampabay.rr.com[65.32.1.41]
ms-smtp-01.tampabay.rr.com[65.32.1.43]

so we=B4d like to exclude:

(smtp.*|biz)\.rr\.com


Anybody know how to put make negate work in postfix pcre: ??

Len





Reply via email to