Wasn't it SIMS Discussions [EMAIL PROTECTED] who once said... >Date: Wed, 19 Feb 2003 11:44:34 -0500 >From: ted crane <[EMAIL PROTECTED]> >Subject: Re: Routing to error > > >>Okay, I thought I had this, but I don't. I'm trying to "thin-out" my >>Black List by using some router entries for spammers whose domain >remains >>the same, but whose ip seems to change with the seasons. >> >>Here is a typical header from one such spammer: >> >>>Return-Path: [EMAIL PROTECTED] >> >>now, as I understand things, if I set up the following router entry: >> >> save99.com=error >> >>and also have "verify return paths" turned on, then the above message >>should have bounced. > >You need *both* > save99.com = error > *.save99.com = error
Ah-ha! I knew it would be something simple like that. Is the "order" of those entries critical? I mean, does it matter if "*.save99.com" comes before "save99.com"? >In this case, the return path was "mail90.save99.com" and didn't >match your router entry. The "*.domain.tld" entry will match all >subdomains. I had actually suspected that this might be the problem and put that entry into my router right after sending off this message. Wouldn't you know it, though... the spammer switched return paths! <sigh> It's a never-ending battle, ain't it? Thanks for all the comments! ================================================ | Doug Starkey | | Network Administrator | | Pecan Deluxe Candy Company | | 2570 Lone Star Drive | | Dallas, TX 75212-6308 | | e-mail: [EMAIL PROTECTED] | | voice: 214-631-3669 Ext. 108 | | fax: 214-631-5833 | ================================================ ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
