[qmailtoaster] Re: badmailfrom

2013-03-08 Thread Eric Shubert
On 03/08/2013 04:37 PM, mattias wrote: can i ban a mailadress to send mail to a specific recipient or must i ban the sender in the hole server sorry my english badmailfrom and badmailto use regular expressions (regex) to filter one field or another. They cannot be combined. That being said,

Re: [qmailtoaster] Re: BadmailFrom

2010-11-29 Thread Tony White
Hi Brent, Spamdyke is on as we type That is why it is so strange I get these things. On 30/11/2010 5:36 AM, Brent Gardner wrote: Tony White wrote: Hi Eric, Not sure I understand your response here! The badmailfrom is the file I am using yet you are suggesting I use the "Deliver To" add

Re: [qmailtoaster] Re: BadmailFrom

2010-11-29 Thread Brent Gardner
Tony White wrote: Hi Eric, Not sure I understand your response here! The badmailfrom is the file I am using yet you are suggesting I use the "Deliver To" address which I assumed was used in the Badmailto file? Anyway here is the header... From - Sat Nov 27 03:54:12 2010 X-Account-Key: accoun

Re: [qmailtoaster] Re: BadmailFrom

2010-11-28 Thread Tony White
Hi Eric, Sorry I had not replied, must have missed seeing your response. Yes you are right I was using the wrong sender address. Thank you for pointing this out, I have now read the spamdyke explanation as well. On 29/11/2010 10:57 AM, Eric Shubert wrote: chkuser does not use badmailfrom/bad

Re: [qmailtoaster] Re: BadmailFrom

2010-11-28 Thread David Milholen
Tony, Not sure if it is because a host from 95.45.226.126 seems to be using its domain to traffic services. here is the link for bigpuddle.net http://www.dnsstuff.com/tools/dnsreport?domain=bigpuddle.net&format=raw&loadresults=true&token=0351777ac0e8c1390256b1040d87301

Re: [qmailtoaster] Re: BadmailFrom

2010-11-28 Thread Tony White
Hi Dave, Are you suggesting that the server bigpuddle.net has been hijacked? If so how did you come to that conclusion and what would the remedy be? On 29/11/2010 12:17 PM, David Milholen wrote: If you want you could drop the host(95.45.226.126) in Tcp.rules. I would:) I did a Dns report on a

Re: [qmailtoaster] Re: BadmailFrom

2010-11-28 Thread David Milholen
If you want you could drop the host(95.45.226.126) in Tcp.rules. I would:) I did a Dns report on all the listed domains and none of them reference back to any of the listed domains within the email.  Looks as if a web server with an open mail service has been hijacke

[qmailtoaster] Re: BadmailFrom

2010-11-28 Thread Eric Shubert
chkuser does not use badmailfrom/badmailto. chkuser simply does some sanity checks. badmailfrom/badmailto is part of qmail-smtpd itself (not sure if it's a patch or not). Does that clear things up? On 11/28/2010 04:13 PM, Tony White wrote: Hi Eric, Not sure I understand your response here!

Re: [qmailtoaster] Re: BadmailFrom

2010-11-28 Thread Tony White
Hi Eric, Not sure I understand your response here! The badmailfrom is the file I am using yet you are suggesting I use the "Deliver To" address which I assumed was used in the Badmailto file? Anyway here is the header... From - Sat Nov 27 03:54:12 2010 X-Account-Key: account3 X-UIDL: 12907902

[qmailtoaster] Re: BadmailFrom

2010-11-28 Thread Eric Shubert
On 11/28/2010 03:08 PM, Tony White wrote: Hi folks, I am trying, still, to block a number of emails in the Badmailfrom list. Eric instigated the regex type expressions for me they entire operation does not seem to be working. I have some 150 addresses in the file and none of the are blocked. Exa