[Mimedefang] Need help with filter_relay

Mark Penkower mark at roycenet.com
Wed May 19 11:20:39 EDT 2004


Much of my spam can be flagged by keywords in the "from" line of the
headers.

Here is an example:

Received: from centraalbeheer.nl (dsl-213-023-032-104.arcor-ip.net
[213.23.32.104]) 

Here, "dsl" is the flag

Other spam keywords that I have found are:

adsl
pool
client
cliente
unassigned

I have 3 questions:


1 - It is my suspicion that bouncing emails with these keywords in the
"from" header will only bounce spam.  Am I correct here?


2 - Can somebody post more keywords that I should block.

3 - For the purposes of a filter to bounce these emails, I am not sure
where to reference the header in filter_relay.  Would this work:

sub filter_relay {
            my ($ip, $name, $helo) = @_;
            if ($name =~ /dsl) or
            if ($name =~ /pool)  
 {
        return action_bounce("My Bounce Message");             }
            return (CONTINUE, "ok");  


Thanks


Mark Penkower



More information about the MIMEDefang mailing list