On 04/05/02 at 12:30, Paul List Hess wrote:
> Hi Flip,
>
> First take a look at the headers from a message from the source you
> want to block (on Eudora press the "blah blah blah" button). Find
> out the IP address of the end server that hands mail over to your
> system (it's the topmost "Received" line). Then add that IP address
> to your blacklist under SIMS SMTP settings, under "blacklist". For
> good measure you might also want to add the ip addresses of the two
> mail servers you mentioned which may or may not be the same as the
> one above that you really need to block.
Also, if the address in the 'Return-Path' header is consistent among the
problem messages (it may very well _not_ be, since it's trivial to forge,
which spammers commonly do), you can route that address to 'error' and
enable 'verify return paths' in the SMTP service settings. SIMS will then
reject messages whose return paths (i.e. envelope senders) match your
router entry. As an example, suppose the Return-paths in the headers all
look like:
Return-Path: [EMAIL PROTECTED]
You can add this line to your router:
<[EMAIL PROTECTED]> = error
If the domain name is always the same, but the user name varies, you can
use:
bonehead.com = error
Note that this only works with the 'Return-Path' address. SIMS does not
look at the 'From' or 'Reply-To' addresses.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/> | PGP public key available on request
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
