Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread jdow
I suspect that entire 23 subnet is sour and should be blocked. {^_^} - Original Message - From: "Martin Gregorie" Sent: Tuesday, 2010/September/07 17:18 On Tue, 2010-09-07 at 16:05 -0700, jdow wrote: whois 67.50.37.35 There's something odd about that IP all right. I got this: $

Re: unblacklist_from_rcvd

2010-09-07 Thread Matt Kettler
On 9/7/2010 7:11 PM, William Taylor wrote: I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com Thi

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread Martin Gregorie
On Tue, 2010-09-07 at 16:05 -0700, jdow wrote: > whois 67.50.37.35 > There's something odd about that IP all right. I got this: $ host 67.50.37.35 35.37.50.67.in-addr.arpa domain name pointer zone35.tribalhostland.com. but "host zone35.tribalhostland.com" just says 3(NXDOMAIN) and attempts to use

unblacklist_from_rcvd

2010-09-07 Thread William Taylor
I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com This doesn't really do what I want because the bl

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread jdow
From: "John Hardin" Sent: Tuesday, 2010/September/07 10:02 On Tue, 7 Sep 2010, Per Jessen wrote: John Hardin wrote: Sorry to mislead. SPAM was caught by spamassassin. How can I get this guy stopped? IP addresses are: 67.50.37.35,.36,.69,.75 Ah. Yes, that's a different question. (1) Find

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread Chris
On Tue, 2010-09-07 at 10:02 -0700, John Hardin wrote: > On Tue, 7 Sep 2010, Per Jessen wrote: > > > John Hardin wrote: > > > >>> Sorry to mislead. SPAM was caught by spamassassin. > >>> How can I get this guy stopped? > >>> IP addresses are: 67.50.37.35,.36,.69,.75 > >> > >> Ah. Yes, that's a diff

Re: Checking envelope sender

2010-09-07 Thread Joseph Brennan
MAIL FROM: <"some rubbish words" <>> Why doesn't sendmail reject it like it does here? Sep 6 04:57:26 calabash sm-mta[22772]: [ID 801593 mail.notice] o868vKo9022772: ruleset=check_mail, arg1=<"vjaqrra scuper acntive make your sskexxual" <>>, relay=adsl-pool-124.157.160-227.dynamic.tttmax

Re: Checking envelope sender

2010-09-07 Thread John Hardin
On Tue, 7 Sep 2010, Mike Bro wrote: Hello, Enviroment: latest sendmail and latest spamassassin I am just trying to fight with spammer that used to send too many emails. The pattern I discovered is that during smtp communication with my incoming mail server in from field he puts something lik

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread John Hardin
On Tue, 7 Sep 2010, Per Jessen wrote: John Hardin wrote: Sorry to mislead. SPAM was caught by spamassassin. How can I get this guy stopped? IP addresses are: 67.50.37.35,.36,.69,.75 Ah. Yes, that's a different question. (1) Find out who owns those network addresses. Use tools like http://e

Re: Checking envelope sender

2010-09-07 Thread Bowie Bailey
On 9/7/2010 12:50 PM, Martin Gregorie wrote: > On Tue, 2010-09-07 at 16:46 +0100, Mike Bro wrote: >> Hello, >> >> Enviroment: >> latest sendmail and latest spamassassin >> >> I am just trying to fight with spammer that used to send too many emails. >> The pattern I discovered is that during smtp c

Re: Checking envelope sender

2010-09-07 Thread Martin Gregorie
On Tue, 2010-09-07 at 16:46 +0100, Mike Bro wrote: > Hello, > > Enviroment: > latest sendmail and latest spamassassin > > I am just trying to fight with spammer that used to send too many emails. > The pattern I discovered is that during smtp communication with my > incoming mail server in from f

Checking envelope sender

2010-09-07 Thread Mike Bro
Hello, Enviroment: latest sendmail and latest spamassassin I am just trying to fight with spammer that used to send too many emails. The pattern I discovered is that during smtp communication with my incoming mail server in from field he puts something like: MAIL FROM: <"some rubbish words" <>>

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread Per Jessen
John Hardin wrote: >> Sorry to mislead. SPAM was caught by spamassassin. >> How can I get this guy stopped? >> IP addresses are: 67.50.37.35,.36,.69,.75 > > Ah. Yes, that's a different question. > > (1) Find out who owns those network addresses. > > Use tools like http://enc.com.au/itools/inetn

Re: spam CAUGHT, now how to catch spammer

2010-09-07 Thread John Hardin
On Mon, 6 Sep 2010, Dennis German wrote: On Sun, 5 Sep 2010, Dennis German wrote: In the last several weeks I have been receiving a lot of spam with email addresses of the form: learningmadeeasy.???...@??.yourseemlost.net learningmadeeasy.???...@??.hisoftenusing.net learningmadeeasy.

Re: spam caught, now how to catch spammer

2010-09-07 Thread Daniel McDonald
On 9/5/10 8:46 PM, "Dennis German" wrote: > In the last several weeks I have been receiving a lot of spam with email > addresses of the form: > > learningmadeeasy.???...@??.yourseemlost.net > > accountingeducation.gpx...@oiteew.badpeoplepaper.net > > affordablelifeinsurance.aj...@wiogif