Okay, I thought I had this, but I don't. I'm trying to "thin-out" my
Black List by using some router entries for spammers whose domain remains
the same, but whose ip seems to change with the seasons.
Here is a typical header from one such spammer:
>Return-Path: [EMAIL PROTECTED]
>Received: from mail90.save99.com ([65.61.136.90] verified) by
bigbrother.pecandeluxe.com
> (Stalker SMTP Server 1.8b9d14) with SMTP id S.0000092248 for
<[EMAIL PROTECTED]>;
> Tue, 18 Feb 2003 14:29:35 -0600
>Content-Transfer-Encoding: 7bit
>Content-Type: multipart/alternative;
boundary="_----------=_9282486241925832273696"
>MIME-Version: 1.0
>X-Mailer: MIME::Lite 2.117 (F2.6; B2.12; Q2.03)
>Date: Tue, 18 Feb 2003 20:29:29 UT
>X-Save: H4F%N9&]M258B*(EUH/SV<:52F_G'0<&W&AB_[7%F/AZGL[K!+HA+W@``
>Subject: [EMAIL PROTECTED], Are you prepared for a chemical or
biological attack?
>X-List-Unsubscribe: <[EMAIL PROTECTED]>
>From: "Savings Newsletter" <[EMAIL PROTECTED]>
>Reply-To: "Savings Newsletter" <[EMAIL PROTECTED]>
>Return-Path: <[EMAIL PROTECTED]>
>To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
now, as I understand things, if I set up the following router entry:
save99.com=error
and also have "verify return paths" turned on, then the above message
should have bounced.
Well, it didn't!
What am I missing here?
Just for fun, here is the SIMs log for the above mail:
14:12:17 5 SYSTEM {S.0000092248} created, ref=678, nFresh=5
14:29:34 5 SYSTEM {S.0000092248} in work, ref=678, nFresh=4
14:29:36 2 SMTP-844(mail90.save99.com) {S.0000092248} received, 5294 bytes
14:29:36 4 SMTP-844(mail90.save99.com) Sending 250 S.0000092248 message
accepted for delivery\r\n
14:29:36 5 SYSTEM Scanning {S.0000092248}
14:29:36 5 SYSTEM Line Read: Received: from mail90.save99.com
([65.61.136.90] verified) by bigbrother.pecandeluxe.com (Stalker SMTP
Server 1.8b9d14) with SMTP id S.0000092248 for
<[EMAIL PROTECTED]>; Tue, 18 Feb 2003 14:29:35 -0600
14:29:36 2 SYSTEM [S.0000092248] S.0000092248 0+1
From:[EMAIL PROTECTED]
14:29:36 4 SYSTEM [S.0000092248] submitted
14:29:36 5 SYSTEM [S.0000092248] OSOpen refNum=794
14:29:36 5 SYSTEM [S.0000092248] reading: 5172 bytes at 122
14:29:36 4 SYSTEM [S.0000092248] stored in 'nethead' at 682624(+0)
14:29:36 2 SYSTEM(POP) [S.0000092248] delivered to (nethead)
14:29:36 2 SYSTEM [S.0000092248] deleted
Any help?
================================================
| Doug Starkey |
| Network Administrator |
| Pecan Deluxe Candy Company |
| 2570 Lone Star Drive |
| Dallas, TX 75212-6308 |
| e-mail: [EMAIL PROTECTED] |
| voice: 214-631-3669 Ext. 108 |
| fax: 214-631-5833 |
================================================
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
