Re: Being Buried In Returned Email - Need To Mark Certain IPs

[Michelle Konzack <li...@tamay-dogan.net>]

Am 2008-06-29 07:07:58, schrieb thadcoco:
> servers. Virtually all these emails are being sent from a zombie at a single
> IP. 

OK

> i.e.: All the messages contain the following line somewhere within:
> Received: from d04m-89-83-98-193.d4.club-internet.fr ([89.83.98.193])
> 
> I can't figure out how to mark any messages that originally sourced from
> that IP so that that can be dropped by Procmail (that approach would appears
> to be my only hope, as junk is arriving faster than my mail client can pull
> it off the server.

Procmail?

:0
* ^Received:.*d04m-89-83-98-193.d4.club-internet.fr
/dev/null

No spamassassin needed if it is REALY every time the same IP/FQDN.
And yes, I have a list of arround 200 of them in  my  cache,  since  the
$USER (Club Internet, Free, Alice) have a fixed IP which never change.

Thanks, Greetings and nice Day/Evening
    Michelle Konzack
    Systemadministrator
    24V Electronic Engineer
    Tamay Dogan Network
    Debian GNU/Linux Consultant


-- 
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack   Apt. 917                  ICQ #328449886
+49/177/9351947    50, rue de Soultz         MSN LinuxMichi
+33/6/61925193     67100 Strasbourg/France   IRC #Debian (irc.icq.com)