Much of my spam can be flagged by keywords in the "from" line of the
headers.
Here is an example:
Received: from centraalbeheer.nl (dsl-213-023-032-104.arcor-ip.net
[213.23.32.104])
Here, "dsl" is the flag
Other spam keywords that I have found are:
adsl
pool
client
cliente
unassigned
I have 3 questions:
1 - It is my suspicion that bouncing emails with these keywords in the
"from" header will only bounce spam. Am I correct here?
2 - Can somebody post more keywords that I should block.
3 - For the purposes of a filter to bounce these emails, I am not sure
where to reference the header in filter_relay. Would this work:
sub filter_relay {
my ($ip, $name, $helo) = @_;
if ($name =~ /dsl) or
if ($name =~ /pool)
{
return action_bounce("My Bounce Message"); }
return (CONTINUE, "ok");
Thanks
Mark Penkower
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
