Re: Sober (Was Re: [Mimedefang] code 421 and filter_sender)

2005-12-06 Thread Mike Batchelor
On 12/6/05, Paul Whittney <[EMAIL PROTECTED]> wrote: > Remember, the reason the emails are knocking on your > server's door is that an infected machine has your users email address > somewhere on their system (okay, thats a bit too simple, as it could be > going through cached/saved files looking f

Re: Sober (Was Re: [Mimedefang] code 421 and filter_sender)

2005-12-06 Thread Mike Batchelor
On 12/6/05, Paul Whittney <[EMAIL PROTECTED]> wrote: > Sorry, Mike, doesn't really address what you're talking about. Isn't > sendmail's RCPT Throttle hooks good for this? Thanks for your input, even though it is only tangential to my question. My object is to get the worm off the socket asap. S

[Mimedefang] code 421 and filter_sender

2005-12-06 Thread Mike Batchelor
I have this code in filter_recipient, and it works as expected. Sendmail issues the 421 error and drops the connection as soon as a recipient is given, if the sender matched: sub filter_recipient { if ($sender =~ /^<[EMAIL PROTECTED]>?$/i) { return('TEMPFAIL', "$sender is wormsign.", '42

[Mimedefang] Useful perl command: list module versions and compare to CPAN

2005-10-06 Thread Mike Batchelor
I was trying to determine what versions of which modules were installed on my instance of perl, to prepare for a Mimedefang upgrade. I searched this list, and found several posts showing various ad-hoc ways of getting this information, and then I found this gem on IBM's support site: perl -MCPAN

Re: [Mimedefang] MX resolves to localhost

2004-08-16 Thread Mike Batchelor
On Mon, 16 Aug 2004 14:03:39 -0700, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Mike Batchelor wrote: > > I want to reject mail for domains that resolve to 127.0.0.1 or that > > have MX records with hostnames that resolve to 127.0.0.1 > > Or do you mean

[Mimedefang] MX resolves to localhost

2004-08-16 Thread Mike Batchelor
I want to reject mail for domains that resolve to 127.0.0.1 or that have MX records with hostnames that resolve to 127.0.0.1. I have tons of double bounces due to "MX loops back to me" because the damn sender domain resolves to localhost. Any ideas how to proceed? Does mimedefang provide any fun

Re: [Mimedefang] Sendmail mailertable question

2004-06-29 Thread Mike Batchelor
On Tue, 29 Jun 2004 12:44:28 -0400, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > [EMAIL PROTECTED] wrote on 06/28/2004 07:19:53 > PM: > > > Try using it with quotes around the custom SMTP response string: > > Bizarre! The books sendmail and sendmail Cookbook do not indicate the > need for t

Re: [Mimedefang] Sendmail mailertable question

2004-06-28 Thread Mike Batchelor
On Mon, 28 Jun 2004 11:47:33 -0400, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > I added the following line to my mailertable: > > eriecc.wnyric.org error:5.1.2:550 This domain no longer accepts email Try using it with quotes around the custom SMTP response string: eriecc.wnyr

Re: [Mimedefang] When do added headers become visible?

2004-06-18 Thread Mike Batchelor
--On Friday, June 18, 2004 4:57 PM -0400 "David F. Skoll" <[EMAIL PROTECTED]> wrote: SpamAssassin will never see that header, because the function: action_add_header(...) just makes a *note* in a special file. After all the Perl processing has finished, the C glue code reads the note and

[Mimedefang] When do added headers become visible?

2004-06-18 Thread Mike Batchelor
I'm trying to add a X-Is-A-Bounce: 1 header to emails with a null sender, so that a custom SpamAssassin rule can use that header to help decide whether the message is a bounce or not. In filter_begin, I add the header if $Sender is the null sender <>, and in filter_end I call SpamAssassin. How