Make that /\.mail\.pas\earhtlink.net/ DUNNO /(\.biz)|(\.mail)|(smtp\d*)\.mindspring\.(net|com)/ DUNNO
-----Original Message----- From: Tom Baker|Netsmith Inc [mailto:[EMAIL PROTECTED] Sent: Sunday, September 14, 2003 9:05 AM To: '[EMAIL PROTECTED]' Subject: [IMGate] Re: anybody know the PTR for charter outbound MTAs? *.mail.pas.earthlink.net *.mail.mindspring.net *.biz.mindspring.com # zegrep -i '\.(earthlink|mindspring)\..*4tuple.*from=<.*@(earthlink|mindspring)\..*>' /var/log/maillog.0.gz | awk '{print $10}' | sort -f | uniq -i albatross.mail.pas.earthlink.net[207.217.120.120]: avocet.mail.pas.earthlink.net[207.217.120.50]: barry.mail.mindspring.net[207.69.200.25]: blount.mail.mindspring.net[207.69.200.226]: conure.mail.pas.earthlink.net[207.217.120.54]: falcon.mail.pas.earthlink.net[207.217.120.74]: firecrest.mail.pas.earthlink.net[207.217.121.247]: flamingo.mail.pas.earthlink.net[207.217.120.232]: goose.mail.pas.earthlink.net[207.217.120.18]: granger.mail.mindspring.net[207.69.200.148]: grouse.mail.pas.earthlink.net[207.217.120.116]: gull.mail.pas.earthlink.net[207.217.120.84]: hall.mail.mindspring.net[207.69.200.60]: harrier.mail.pas.earthlink.net[207.217.120.12]: hawk.mail.pas.earthlink.net[207.217.120.22]: heron.mail.pas.earthlink.net[207.217.120.189]: mallard.mail.pas.earthlink.net[207.217.120.48]: maynard.mail.mindspring.net[207.69.200.243]: mclean.mail.mindspring.net[207.69.200.57]: pintail.mail.pas.earthlink.net[207.217.120.122]: scaup.mail.pas.earthlink.net[207.217.120.49]: smtp6.mindspring.com[207.69.200.110]: snipe.mail.pas.earthlink.net[207.217.120.62]: stork.mail.pas.earthlink.net[207.217.120.188]: swan.mail.pas.earthlink.net[207.217.120.123]: turkey.mail.pas.earthlink.net[207.217.120.126]: user-0c93j6v.cable.mindspring.com[24.145.204.223]: user-0cdvru8.cable.mindspring.com[24.223.239.200]: user-12hcifu.cable.mindspring.com[69.22.73.254]: user-vc8fm3i.biz.mindspring.com[216.135.216.114]: -----Original Message----- From: Len Conrad [mailto:[EMAIL PROTECTED] Sent: Sunday, September 14, 2003 8:55 AM To: [EMAIL PROTECTED] Subject: [IMGate] Re: anybody know the PTR for charter outbound MTAs? > > zegrep " connect from.*charter\.com" /var/log/maillog.1.gz | awk > > '{print $8}' | sort - | uniq -i | sort -t[ -k2 | less > > > > Len- > > > > > >Take out the com to look for charter.net also. I see some PTR that >look like they may be the MTAs: ah right, some for (earthlink|minspring)\.(net|com) >rems02.cluster1.charter.net[209.225.8.202] >remt19.cluster1.charter.net[209.225.8.29] >remt20.cluster1.charter.net[209.225.8.30] >remt21.cluster1.charter.net[209.225.8.31] >remt22.cluster1.charter.net[209.225.8.32] >remt23.cluster1.charter.net[209.225.8.33] >remt24.cluster1.charter.net[209.225.8.34] >remt25.cluster1.charter.net[209.225.8.35] >remt26.cluster1.charter.net[209.225.8.36] >remt27.cluster1.charter.net[209.225.8.37] >remt28.cluster1.charter.net[209.225.8.38] >remt30.cluster1.charter.net[209.225.8.40] >dc-mxdb10.cluster1.charter.net[209.225.8.74] > >*.cluster1.charter.net maybe? I'd got with /(remt|mx).*\.charter\.(net|com)/ DUNNO thanks Len
