Re: BlackListing

[Tod Fitch]

Yep. You can enter host addresses or ranges of host addresses as lines 
in the blacklist section under the SMTP area. If I get a problem with 
one IP address I typically blacklist everything in the class C address 
range that covers it. For example if I detect address harvesting or 
spam from 12.34.56.78 then I will enter the following line into the 
blacklist area:

12.34.56.0-12.34.56.255  ; 12.34.56.78 8Jan04 - Addr Harvest

The stuff after the semicolon is a comment to remind me why I entered 
the line.

Spam has gotten bad enough that I have written a little program to 
automate parts of my process. My program will scan the junk mailboxes 
for the current user (I use the OS X mail.app mail reader) and extract 
out the IP addresses that are in the "received by" lines inserted my 
trusted email server and create a file with ranges of banned IP 
addresses in the SIMS IP address list form. I could cut and paste those 
into SIMS, but my list is getting a bit big for SIMS to handle.

So the other thing the program can do is combine all the SIMS style 
black list files I have and create a bind zone file for my local 
blacklist server.

If you are interested, I could make the program available. It is not a 
"production ready" piece of software (lacking lots of documentation for 
one thing) and it was specifically written for my environment: Runs as 
a Unix command line program, assumes SIMS style "received by lines", 
finds junk mail in places the OS X mail app for Panther and Jaguar put 
it and can generate zone files for Bind v9 as happened to be installed 
on my OS X 10.1.4 internal DNS server. It is written in C and I would 
publish the source along with an executable (I would not run a program 
like this unless I could review the source and I hope you feel the 
same.)
-Tod

On Jan 8, 2004, at 6:07 AM, List wrote:

Anyone,

I need a little deeper understanding on setting up SIMS to help stop
incoming junk mail. I threw together a little FileMaker Pro file to 
extract
the derivative IP address in junk mail. Can we enter those IP 
addresses into
the "Black Listed" feature under SMTP to stop incoming junk mail ...or 
just
how does that feature work?

David Haney
_____________________________________
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  ______________________
  tel: 602-992-3800
  fax: 602-992-2428
  -
  EasyACCOUNTING with FileMaker Pro
  http://www.filemakeraccounting.com
  ftp://ftp.filemakeraccounting.com
  -
  WEB/Lasso/FileMaker/4D/mySQL Hosting
  http://www.davidhaney.com
  ftp://ftp.davidhaney.com
  ftp://apps.davidhaney.com
  ftp://mp3.davidhaney.com
#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>


#############################################################
This message is sent to you because you are subscribed to
 the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>