I've used MIMESweeper to dump stuff like this but any mail filter with text search capabilities will work. Just remember that such tools have an adminstrative overhead associated with them. You might find the delete button to be less time consuming.
-- Bill Stackpole, CISSP
| "Network Operations" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 05/24/00 08:30 AM
|
To: <[EMAIL PROTECTED]> cc: Subject: Blocking mail from the Philippeans |
Does anyone have a blackhole list that I can set at my border router for, oh...say EVERY domain in the Philippeans? Im sick of getting crap like this:
Received: from mail.arellano.edu.ph
([202.8.248.123])
by my.government.agency.us; Tue, 23 May 2000 16:23:41 -0700
Received: from - (202.110.80.110 [202.110.80.110]) by mail.arellano.edu.ph with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.1960.3)
id LNNPV0QC; Wed, 24 May 2000 07:17:44 +0800
From: "wahaha123" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: How are you?
To: <[EMAIL PROTECTED]>
X-Mailer: Microsoft Outlook Express 4.05.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V��D.1712.3
Mime-Version: 1.0
Date: Wed, 24 May 2000 06:43:54 +0800
Content-Type: multipart/mixed; boundary="----=_NextPart_000_007F_01BDF6C7.FABAC1B0"
Content-Transfer-Encoding: 7bit
------=_NextPart_000_007F_01BDF6C7.FABAC1B0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0080_01BDF6C7.FABAC1B0"
------=_NextPart_001_0080_01BDF6C7.FABAC1B0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
***** This is an HTML Message ! *****
------=_NextPart_001_0080_01BDF6C7.FABAC1B0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<script>
var vers = navigator.appVersion.charAt (0)
if (vers >= 3) {
newwin=open("http://coolwebsite.heha.net/cgi-bin/xfindex2.cgi"
, "win", "width=1,height=1,scrollbars=no,menubar=no");
}
</script>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<meta name="GENERATOR" content="Microsoft FrontPage 3.0">
<title>news</title>
</head>
<frameset rows="0,*,80">
<frame name="top" scrolling="no" noresize target="_blank" src="h
ttp://coolwebsite.heha.net/cgi-bin/xfbkzz.cgi">
<frameset cols="0,*">
<frame name="contents" src="http://coolwebsite.heha.net/cgi-bi
n/yahoo3.cgi">
<frame name="main" noresize target="_blank" src="http://coolweb
site.heha.net/cgi-bin/xfindex.cgi" scrolling="no">
</frameset>
<frame name="bottom" scrolling="no" noresize target="_blank" src=
"http://coolwebsite.heha.net/cgi-bin/xfindex3.cgi">
<noframes>
<body>
<p>Please to </p>
</body>
</noframes>
</frameset>
</html>
------=_NextPart_001_0080_01BDF6C7.FABAC1B0--
------=_NextPart_000_007F_01BDF6C7.FABAC1B0--
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
