[Mimedefang] Example Filters

[Dave Shepherd]

Andy,

I use the filter_relay to block entire subnets from porn sites over seas 
that I receive multipal spam from.

sub filter_relay {
    my($ip, $name, $helo) = @_;

    # Restrict to our subnets
    return('ACCEPT_AND_NO_MORE_FILTERING', "ok")
           if (
                $ip eq "127.0.0.1" or
                $ip =~ /^172\.16\./ or
                $ip =~ /^192\.168\.1\./ or
                $ip =~ /^38\.244\.18\./
              );

    # Allow mail from Mike's home mailserver
    return('CONTINUE', "ok") if($ip eq "64.91.104.2");

    # Make sure they use their hostname
    if ($helo =~ /^(\d{1,3})(.)(\d{1,3})(.)(\d{1,3})(.)(\d{1,3})$/) {
        return ('REJECT', "Please use your host name when saying HELO")
    }

    # Blocked subnets
    #do "/etc/mail/subnets-blocked";
    if(
        ($ip =~ /^200\.80\.47\./) ||
        ($ip =~ /^24\.54\.74\./) ||
        ($ip =~ /^66\.117\.15\./) ||
        ($ip =~ /^66\.232\.42\./) ||
        ($ip =~ /^218\.152\.170\./)||
        ($ip =~ /^207\.173\.88\./)
        )
    { return ('REJECT', "Rejected; smells like SPAM!");    }

    if(
        ($helo =~ /^(\d{1,3})(.)(\d{1,3})(.)(\d{1,3})(.)(\d{1,3})$/) &&
        ($ip ne $helo))
    { return ('REJECT', "Header forgery attempt, $ip claims to be $helo")  }

    return ('CONTINUE', "ok");

} # end sub


Andy Kirkby wrote:

>Does anybody have any good example filters I could have a look at? I am
>trying to create a filter that will allow me to blacklist certain
>domains, ideally I want to take a copy of the message as it is received
>and then bounce it so that they get the message that I don't want all
>their junk! I only want the message copy just in case I bounce anything
>I really need L.
>
>Cheers,
>
>Andy.
>
>
>_______________________________________________
>MIMEDefang mailing list
>MIMEDefang at lists.roaringpenguin.com
>http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>  
>