Re: need a regular expression to create

[Benny Pedersen]

On Fredag, 20/6 2008, 15:39, McDonald, Dan wrote:

> I think he said it was in the content, not the envelope.

nice rules, but try freemail plugin :-)


Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: need a regular expression to create

[Benny Pedersen]

On Fredag, 20/6 2008, 15:26, vodamailshiva wrote:

> please help me..

just dont whitelist gmail mails at all

need more help ?, post the spammail on pastebin and give a link here


Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: need a regular expression to create

[McDonald, Dan]

On Fri, 2008-06-20 at 10:29 -0300, Leonardo Rodrigues Magalhães wrote:
> 
> vodamailshiva escreveu: 
> > Hi, 
> > One of spammers is killing our SMTP servers. 
> > in the content of e-mail, he is mentioning 2 e-mails addresses. 
> > i need to create a rule to black the spammer. 
> > he is using [EMAIL PROTECTED],  [EMAIL PROTECTED] ,i need
> > to black the spam e-mails using content of e-mail. 
> > 
> 
> 
> if you identified which email addresses the spammer is using as
> the sender of the message, block them at the MTA !!


I think he said it was in the content, not the envelope.

Something like:
body_L_GMAIL_SPAMMER1   [EMAIL PROTECTED]
description _L_GMAIL_SPAMMER1   refers to a known spammer

body_L_GMAIL_SPAMMER2   [EMAIL PROTECTED]
description _L_GMAIL_SPAMMER2   refers to a known spammer

metaL_GMAIL_SPAMMERS_L_GMAIL_SPAMMER1 | _L_GMAIL_SPAMMER2
description L_GMAIL_SPAMMERShas at least one spammer e-mail address 
in the body
score   L_GMAIL_SPAMMERS3.0


-- 
Daniel J McDonald, CCIE #2495, CISSP #78281, CNX
Austin Energy
http://www.austinenergy.com



signature.asc
Description: This is a digitally signed message part

Re: need a regular expression to create

[Leonardo Rodrigues Magalhães]

vodamailshiva escreveu:

Hi,
One of spammers is killing our SMTP servers.
in the content of e-mail, he is mentioning 2 e-mails addresses.
i need to create a rule to black the spammer.
he is using [EMAIL PROTECTED] ,  
[EMAIL PROTECTED]  ,i need to 
black the spam e-mails using content of e-mail.





   if you identified which email addresses the spammer is using as the 
sender of the message, block them at the MTA !!


   it could be done in SA ??? Of course  but you'll waste far 
more resources than blocking at MTA level.




--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
[EMAIL PROTECTED]
My SPAMTRAP, do not email it

need a regular expression to create

[vodamailshiva]

Hi,
One of spammers is killing our SMTP servers.
in the content of e-mail, he is mentioning 2 e-mails addresses.
i need to create a rule to black the spammer.
he is using [EMAIL PROTECTED],  [EMAIL PROTECTED] ,i need to black
the spam e-mails using content of e-mail.
please help me..