From: Axb
Date: 2015-06-29 14:04
To: users
Subject: Re: India spam
On 29.06.2015 18:42, [email protected] wrote:
> Hello, this is my first time on the list and would appreciate some
> help on a recipe. This may have been answered already as I can't
> imagine others not experiencing a similar issue. I've searched google
> but haven't found the searchable spamassassin list yet.
>
> My question: How can I format a recipe that will catch the ".in.net"
> portion of an IP as many domain names are used in front of that
> domain bit?
>
> Any help please?
after a lot of noise.... you want to tag the URI or the URI's A record IP?
For the URI, how about something like:
uri URI_NET_IN /\w+\.net\.in/
and set score as high as you please
OR if you want something drastic AND you are using SA 3.4.x
blacklist_uri_host net.in
IF you want to list the URI's A record IPs you'll need to run a local IP
BL - whole different story
h2h
Axb
------------------------------------
Many thanks, Axb!
Actually, I more inclined to snag the domain rather than the IP as the IP may
be innocent.
I like your ideas, and will start with the first one and watch the headers as
these are really annoying and want 'em gone! I'm using the latest version of
SA, so I can try them all.
Again, my apologies for intruding on the wrong list!!
/Chino
