Re: [Fwd: Preliminary investigation were started]
Richard Lyons(richard@the-place.net) is reported to have said:
> On Friday 16 January 2004 22:23, Wayne Topa wrote:
> [...]
> > I have a mailfilter rule that deletes mail without an
> > originating Message-ID: and it has not had a false positive in over 3
> > months now.
> [...]
> Would you care to share with those like me who can't immediately see how
> to do it how exactly is that filter set up?
>
^Message-Id:.*smtp[0-9]\.your\.isp
It is easy if you can find a spam message with your ISP in the
Message-Id: header. ie
egrep "^Message-Id:.*\.your\.isp" logs/mailfilterlog
Note that my ISP, capital.net, is NOT what I found in the Message-ID.
It was their smtp server address and it varied, so I had to write the
rule accordingly.
:-) HTH, YMMV, HAND :-)
Wayne
--
Those who can, do. Those who cannot, teach. Those who cannot teach,
HACK!
_______________________________________________________
Reply to: