[Mimedefang] Need help with filter_relay
    Mark Penkower 
    mark at roycenet.com
       
    Wed May 19 11:20:39 EDT 2004
    
    
  
Much of my spam can be flagged by keywords in the "from" line of the
headers.
Here is an example:
Received: from centraalbeheer.nl (dsl-213-023-032-104.arcor-ip.net
[213.23.32.104]) 
Here, "dsl" is the flag
Other spam keywords that I have found are:
adsl
pool
client
cliente
unassigned
I have 3 questions:
1 - It is my suspicion that bouncing emails with these keywords in the
"from" header will only bounce spam.  Am I correct here?
2 - Can somebody post more keywords that I should block.
3 - For the purposes of a filter to bounce these emails, I am not sure
where to reference the header in filter_relay.  Would this work:
sub filter_relay {
            my ($ip, $name, $helo) = @_;
            if ($name =~ /dsl) or
            if ($name =~ /pool)  
 {
        return action_bounce("My Bounce Message");             }
            return (CONTINUE, "ok");  
Thanks
Mark Penkower
    
    
More information about the MIMEDefang
mailing list