Re: [Declude.JunkMail] OT: How do I bounce or reject ...

2004-02-13 Thread Bud Durland 
System Administrator wrote:

What would be the best way to setup IMail/Declude to bounce or reject all
e-mail messages from rr.com subscribers? If possible, in that bounce or
reject message I'd like to add a note telling the sender to have someone at
rr.com call us to discuss the problem.
 

You could reject the messages at the time of receipt using the black 
hole list at rr.blackholes.us (see http://www.blackholes.us for more 
info).  Set it up as a trusted DNS black list in IMail administrator and 
you'll the server will reject the messages.  This won't produce the 
bounce message you're looking for, though.  (OTOH, it will shut off some 
spam -- I get quite a bit from RR cable modem subscribers.)

--
---
illigitimi non carborundum
---
Bud Durland, CNE Mold-Rite Plastics
Network Administrator http://www.mrpcap.com
---
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] OT: How do I bounce or reject ...

2004-02-12 Thread Sanford Whiteman 
> What  would  be  the  best  way  to setup IMail/Declude to bounce or
> reject  all e-mail messages from rr.com subscribers? If possible, in
> that  bounce  or  reject  message I'd like to add a note telling the
> sender to have someone at rr.com call us to discuss the problem.

Since  you  can't  reject  at  the  envelope,  best  bet  might be two
identical  Declude  REVDNS  filters, one with a custom ALERT template,
one  with a WARN header, coupled with an IMail rule to kill mail based
on  the  header.  This  would  allow  spam  from  an rr.com IP to have
stricter  actions  applied  than  ALERT,  while legit mail would still
receive the notification and be nullified.

Still,  you're  opening  a  can of worms with anything that looks like
malicious bouncing (malicious rejection is much smoother, obviously).

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.