[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Insidious Spam/swen/Garbage - other



On Fri, 24 Oct 2003, Ron Johnson wrote:

> > Only if you have a pop3 account, in which case you can preconnect mailfilter
> > before fetchmail to remove most of this stuff from the server before
> > collecting your mail. 
> > 
> > see various .mailfilterrc files post in the last few weeks.  Some
> > filter on size.  I use a combination of Subject, From and To headers to
> > filter most of it out.  Let me know if you want my rc file.
> 
> The problem with mailfilter, regarding swen, is that mailfilter only
> loots at the header, and the swen signature is in the body of the
> mail, where mailfilter can't see it.

though this doesnt help those of you with remote webmails, as originally
posted ..

for those that get those insidious junk on "your mail server" and
havent played/tweeked spamassassin/et.al ... and that it gets thru
your list of rbl's you're using

add or tweek your /etc/mail/access with these sven sources
	http://www.Linux-Sec.net/MSJunk

here's the ip# of the rest of the sven sources that i've gotten once
and add to my list ( i do it the hard way ...once an hour manually,
adding a couple new sven per hour ... bouncing the rest back to the sender

notice where the junk comes from ... :-)
	use "access.ms.pl" to see where its coming from ..

	and the time i get um seems to correspond to times when
	people get up in the morning and to work and to the
	times after dinner ... from that part of the world

- i was curious ...

c ya
alvin



Reply to: