You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Wael ELLOUZE <wa...@tunet.tn> on 2006/01/23 12:38:53 UTC

Block IP source

Hello everyone,
I want to block (or mark it as SPAM) all emails that comes from a specific originate IP adress (because he send every time with different email adress).
How can i make that with spamassassin ?

Thank you for your respond !

This is a header of an mail and i want to block all emails coming from web2002 (193.95.75.135)

>From 68u@voila.com 
Return-Path: <68...@voila.com>
Delivered-To: tunet.tn-wael.ellouze@tunet.tn
Received: from tounes.ati.tn (193.95.66.21) by tunet.tn with SMTP; for <wa...@tunet.tn>; 
Received: from smtpout.gnet.tn (smtpout.gnet.tn [193.95.75.71])
Received: from smtp.gnet.tn (smtp.gnet.tn [193.95.75.75]) by smtpout.gnet.tn (Postfix) with ESMTP for <wa...@tunet.tn>
Received: from servspam (unknown [193.95.75.135])  by smtp.gnet.tn (Postfix) with SMTP for <wa...@tunet.tn>;
From: <68...@voila.com>
To: <wa...@tunet.tn>
Subject: Tarek Smiri:::Brainstorm SARL
Date: Sun, 18 Sep 2005 10:23:35 +0100
Message-ID: <2d...@web20002>
MIME-Version: 1.0
Content-Type: multipart/related;
 boundary="----=_NextPart_000_19FC0_01C5BC39.749E5B20"
Content-Location: http://www.bourseauto.com/bs/bs.htm
X-Mailer: Microsoft CDO for Windows 2000
Thread-Index: AcW8MRLOS4SqDAslR9+4J25VSihZZg==
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506

Re: Block IP source

Posted by Mike Jackson <mj...@barking-dog.net>.
You could write it as a header rule, like...

header ANNOYING_SPAMMER Received =~ /193\.95\.75\.135/
describe ANNOYING_SPAMMER Mark mail from 193.95.75.135 as spam
score ANNOYING_SPAMMER 5

If you have control over your MTA, you might investigate using its mechanism 
to block mail from that IP. For instance, in sendmail you'd use the access 
table, and the entry would look something like...

193.95.75.135 REJECT

Rejecting at the MTA would be more efficient, since 1) it doesn't sound like 
you get anything but spam from that source and 2) your server doesn't have 
to do any more processing of the message.

----- Original Message ----- 
From: "Wael ELLOUZE" <wa...@tunet.tn>
To: <us...@spamassassin.apache.org>
Sent: Monday, January 23, 2006 03:38
Subject: Block IP source


Hello everyone,
I want to block (or mark it as SPAM) all emails that comes from a specific 
originate IP adress (because he send every time with different email 
adress).
How can i make that with spamassassin ?

Thank you for your respond !

This is a header of an mail and i want to block all emails coming from 
web2002 (193.95.75.135)

>From 68u@voila.com
Return-Path: <68...@voila.com>
Delivered-To: tunet.tn-wael.ellouze@tunet.tn
Received: from tounes.ati.tn (193.95.66.21) by tunet.tn with SMTP; for 
<wa...@tunet.tn>;
Received: from smtpout.gnet.tn (smtpout.gnet.tn [193.95.75.71])
Received: from smtp.gnet.tn (smtp.gnet.tn [193.95.75.75]) by smtpout.gnet.tn 
(Postfix) with ESMTP for <wa...@tunet.tn>
Received: from servspam (unknown [193.95.75.135])  by smtp.gnet.tn (Postfix) 
with SMTP for <wa...@tunet.tn>;
From: <68...@voila.com>
To: <wa...@tunet.tn>
Subject: Tarek Smiri:::Brainstorm SARL
Date: Sun, 18 Sep 2005 10:23:35 +0100
Message-ID: <2d...@web20002>
MIME-Version: 1.0
Content-Type: multipart/related;
 boundary="----=_NextPart_000_19FC0_01C5BC39.749E5B20"
Content-Location: http://www.bourseauto.com/bs/bs.htm
X-Mailer: Microsoft CDO for Windows 2000
Thread-Index: AcW8MRLOS4SqDAslR9+4J25VSihZZg==
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506