I have one account with the following configuration:
filters:
from <> drop
from-file ~/.tmda/lists/whitelist_confirmed ok
from-file ~/.tmda/lists/blacklist bounce
from-file ~/.tmda/lists/blacklist_domains bounce
from-file ~/.tmda/lists/blacklist_pending bounce
headers 'X-RBL-Check:.*' bounce=bounce_rbl.txt
blacklist_domains
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
the rest is rather irrelevant... whitelist file is empty. This account is
configured "harshly", that's the idea. Most domains should be bounced. I
could probably list only those that are not to be bounced, but that's
another story.
However, I got spam on it today, a nigerian scammer with confirmation...
Here are some headers:
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 12873 invoked by uid 520); 3 May 2003 00:49:34 -0000
Received: from [EMAIL PROTECTED] by phssthpok.tonid.net by uid 517
with qmail-scanner-1.16
(clamscan: 0.54. spamassassin: 2.43. Clear:SA:1(9.0/5.0):.
Processed in 4.862473 secs); 03 May 2003 00:49:34 -0000
X-Spam-Status: Yes, hits=9.0 required=5.0
Received: from tonid.net (HELO phssthpok.tonid.net)
([EMAIL PROTECTED])
by tonid.net with SMTP; 3 May 2003 00:49:28 -0000
Old-Delivered-To: [EMAIL PROTECTED]
Received: (qmail 12405 invoked by uid 520); 2 May 2003 23:25:42 -0000
Received: from [EMAIL PROTECTED] by phssthpok.tonid.net by uid 517
with
qmail-scanner-1.16
(clamscan: 0.54. spamassassin: 2.43. Clear:SA:1(9.0/5.0):.
Processed in 4.14629 secs); 02 May 2003 23:25:42 -0000
Received: from f37.law12.hotmail.com (HELO hotmail.com) (64.4.19.37)
by tonid.net with SMTP; 2 May 2003 23:25:37 -0000
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Fri, 2 May 2003 16:25:32 -0700
Received: from 216.139.176.43 by lw12fd.law12.hotmail.msn.com with HTTP;
Fri, 02 May 2003 23:25:31 GMT
X-Originating-IP: [216.139.176.43]
X-Originating-Email: [EMAIL PROTECTED]
From: "gilbert Dogo Mustapha" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Bcc:
Subject: TRANSFER OF FUND
Date: Sat, 03 May 2003 00:25:31 +0100
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 02 May 2003 23:25:32.0092 (UTC)
FILETIME=[1FFF07C0:01C31102]
X-TMDA-Confirm-Done: 1051917945.12410.542868
X-TMDA-Confirmed: Sat May 3 02:49:27 CEST 2003
Now can anyone explain what's up??? The whole .com domain seems to be
correctly blacklisted and all mail from it should be bounced and not
asked for confirmation... Or do I fail to understand the idea of
[EMAIL PROTECTED] wildcard?...
--
tomasz 'tonid' nidecki, zoliborz, warszawa, poland
[EMAIL PROTECTED] http://tonid.net http://endemic.org
jabber: [EMAIL PROTECTED] registered linux user #308829
'don't worry, hug an algae eater' (c)hubertus
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users
