On 06/07/02 at 15:33, Heath wrote:
> Hi all :)
>
> the following spam keeps plaguing one of my managed domains:
>
> Return-Path: [EMAIL PROTECTED]
> Received: from [216.241.65.205] (HELO mailstimulator.com) by
> mail.eeeff.net (Stalker SMTP Server 1.8b8) with SMTP id S.0000013797
> for <[EMAIL PROTECTED]>; Fri, 07 Jun 2002 15:13:08 +0100
> Date: Fri, 07 Jun 02 09:03:05
> From: "Jewelry Reward" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: re: Your $65.00 Genuine Sapphire Reward!
> MIME-Version: 1.0
> X-Mailer: IES v1.208.131171
> Reply-To: [EMAIL PROTECTED]
> Content-Type: multipart/alternative;
> boundary="=_23a384190b02866e30ad8203f7f881f9"
>
> what should I be NULLing out or ERRORing in my router to stop this
> pest? I've tried some things but they obviously arent working.
If the Return-Path consistently has a domain or sub-domain of
mailstimulator.com, you can route that to ERROR:
mailstimulator.com = error
*.mailstimulator.com = error
You'll also need to enable 'Verify Return-Paths' in the SMTP settings for
those router lines to reject incoming messages. If the relay address,
216.241.65.205, is always the same (you didn't say one way or the other),
add it to your internal blacklist.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
