> > zegrep " connect from.*charter\.com" /var/log/maillog.1.gz | awk '{print
> > $8}' | sort - | uniq -i | sort -t[ -k2 | less
> >
> > Len-
> >
> >
>
>Take out the com to look for charter.net also. I see some PTR that look
>like they may be the MTAs:
ah right, some for (earthlink|minspring)\.(net|com)
>rems02.cluster1.charter.net[209.225.8.202]
>remt19.cluster1.charter.net[209.225.8.29]
>remt20.cluster1.charter.net[209.225.8.30]
>remt21.cluster1.charter.net[209.225.8.31]
>remt22.cluster1.charter.net[209.225.8.32]
>remt23.cluster1.charter.net[209.225.8.33]
>remt24.cluster1.charter.net[209.225.8.34]
>remt25.cluster1.charter.net[209.225.8.35]
>remt26.cluster1.charter.net[209.225.8.36]
>remt27.cluster1.charter.net[209.225.8.37]
>remt28.cluster1.charter.net[209.225.8.38]
>remt30.cluster1.charter.net[209.225.8.40]
>dc-mxdb10.cluster1.charter.net[209.225.8.74]
>
>*.cluster1.charter.net maybe?
I'd got with
/(remt|mx).*\.charter\.(net|com)/ DUNNO
thanks
Len
