On 08/29/03 at 14:49 -0400, chris opined:
> Does the SIMS router only accept one wildcard (*) per entry?
Yes.
> I'm getting a bunch of spam that always comes in with a domain starting
> with "mx##." where ## is a random 2 digit number and then just a LONG
> spam topical domain after.
>
> I wanted to put something like
>
> <[EMAIL PROTECTED]> = blacklist
In this case, you don't need two wild cards; the first one is superfluous.
The entry:
mx* = blacklist
will match all addresses where the domain part starts with 'mx', and is
equivalent to your proposed entry. Also, 'blacklist' will be interpreted as
a local account to which matching messages should be delivered. If you want
to reject or dispose of messages where the Return-Path matches, the entry
should be either:
mx* = error
or
mx* = null
Either way, it's probably not such a good entry to actually use, though, as
the match pattern is far to broad.
[It would be _so_ nice if SIMS' router used regular expressions for pattern
matching. I wouldn't hold my breath for Stalker to do any further
development on SIMS, though, so we will almost certainly never see that.]
> into my router so it will blacklist anyone that who's domain part starts
> with "mx". But the router reports a syntax error if I use more than one *
> in an entry.
There are actually two syntax errors. One is the use of more than one
wildcard. The other is that local aliases (<[EMAIL PROTECTED]>) are only
allowed to have wildcards in the user part.
> Is this kind of filtering possible, or do I have to find other ways of
> getting rid of the spammer (I'm slowly adding RBLs but I want to do them
> slowly so I can see how each starts to impact my traffic).
You're aware, aren't you, that for the purposes of rejecting spam messages,
router entries like the above will only be applied to the Return-Paths of
incoming messages? And then, only if you have 'Verify Return-Paths'
enabled. That doesn't do the same thing as IP blacklisting, and its
usefulness is much narrower.
--
Christopher Bort | [EMAIL PROTECTED]
Webmaster, Global Homes | [EMAIL PROTECTED]
<http://www.globalhomes.com/>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
