Doug Hardie | 25 Apr 2009 23:59
Favicon

Blacklisting the originating MTA

Is it possible for a user to specify that all email from a specific 
originating MTA be blaclisted?  I can't find anything that would show 
how to configure that in the blacklist.

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
tmda-users mailing list
tmda-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmda-users

Jeff LaCoursiere | 26 Apr 2009 00:09

Re: Blacklisting the originating MTA


If you can find a static bit of text in the headers, you can write a 
filter for it in "incoming" and blacklist it there.

j

On Sat, 25 Apr 2009, Doug Hardie wrote:

> Is it possible for a user to specify that all email from a specific
> originating MTA be blaclisted?  I can't find anything that would show
> how to configure that in the blacklist.
>
>
> ------------------------------------------------------------------------------
> Crystal Reports &#45; New Free Runtime and 30 Day Trial
> Check out the new simplified licensign option that enables unlimited
> royalty&#45;free distribution of the report engine for externally facing
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> tmda-users mailing list
> tmda-users <at> lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/tmda-users
>

------------------------------------------------------------------------------
Crystal Reports &#45; New Free Runtime and 30 Day Trial
Check out the new simplified licensign option that enables unlimited
royalty&#45;free distribution of the report engine for externally facing 
server and web deployment.
(Continue reading)

Keith Roberts | 26 Apr 2009 23:48
Favicon

Re: Blacklisting the originating MTA


Try viewing the full headers of the specific emails you want 
to block.

You should be able to see the path the email has taken to 
reach you, from the original sender.

You may then be able to block the emails using the
domain name(s) in the headers.

HTH

Keith Roberts

-----------------------------------------------------------------
Websites:
http://www.php-debuggers.net
http://www.karsites.net
http://www.raised-from-the-dead.org.uk

All email addresses are challenge-response protected with
TMDA [http://tmda.net]
-----------------------------------------------------------------

On Sat, 25 Apr 2009, Doug Hardie wrote:

> To: tmda-users <at> lists.sourceforge.net
> From: Doug Hardie <bc979 <at> lafn.org>
> Subject: Blacklisting the originating MTA
> 
(Continue reading)

Doug Hardie | 28 Apr 2009 02:32
Favicon

Re: Blacklisting the originating MTA

In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
 Keith Roberts <keith <at> karsites.net> wrote:

> Try viewing the full headers of the specific emails you want 
> to block.
> 
> You should be able to see the path the email has taken to 
> reach you, from the original sender.
> 
> You may then be able to block the emails using the
> domain name(s) in the headers.

The TMDA documentation for filters seems to be saying that from-file 
only checks the from email address and does not check the real domains 
of the MTAs involved.

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_______________________________________________
tmda-users mailing list
tmda-users <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tmda-users

Jeff LaCoursiere | 28 Apr 2009 02:40

Re: Blacklisting the originating MTA


On Mon, 27 Apr 2009, Doug Hardie wrote:

> In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
> Keith Roberts <keith <at> karsites.net> wrote:
>
>> Try viewing the full headers of the specific emails you want
>> to block.
>>
>> You should be able to see the path the email has taken to
>> reach you, from the original sender.
>>
>> You may then be able to block the emails using the
>> domain name(s) in the headers.
>
> The TMDA documentation for filters seems to be saying that from-file
> only checks the from email address and does not check the real domains
> of the MTAs involved.
>

Use the "header" filter instead (this is in my .tmda/filters/incoming 
file):

headers '^X-BeenThere: tmda-users <at> lists.sourceforge.net' ok

If you change the 'ok' to 'drop' it would blacklist all emails from this 
list :)

The basic idea is if you can find something consistent in the headers, you 
can do whatever you like with it.
(Continue reading)

Doug Hardie | 28 Apr 2009 02:45
Favicon

Re: Blacklisting the originating MTA

In article <alpine.BSF.2.00.0904280038170.99030 <at> phoenix.jeff.net>,
 Jeff LaCoursiere <jeff <at> jeff.net> wrote:

> On Mon, 27 Apr 2009, Doug Hardie wrote:
> 
> > In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
> > Keith Roberts <keith <at> karsites.net> wrote:
> >
> >> Try viewing the full headers of the specific emails you want
> >> to block.
> >>
> >> You should be able to see the path the email has taken to
> >> reach you, from the original sender.
> >>
> >> You may then be able to block the emails using the
> >> domain name(s) in the headers.
> >
> > The TMDA documentation for filters seems to be saying that from-file
> > only checks the from email address and does not check the real domains
> > of the MTAs involved.
> >
> 
> Use the "header" filter instead (this is in my .tmda/filters/incoming 
> file):
> 
> headers '^X-BeenThere: tmda-users <at> lists.sourceforge.net' ok
> 
> If you change the 'ok' to 'drop' it would blacklist all emails from this 
> list :)
> 
(Continue reading)

Keith Roberts | 28 Apr 2009 06:30
Favicon

Re: Blacklisting the originating MTA

On Mon, 27 Apr 2009, Doug Hardie wrote:

> To: tmda-users <at> lists.sourceforge.net
> From: Doug Hardie <bc979 <at> lafn.org>
> Subject: Re: Blacklisting the originating MTA
> 
> In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
> Keith Roberts <keith <at> karsites.net> wrote:
>
>> Try viewing the full headers of the specific emails you want
>> to block.
>>
>> You should be able to see the path the email has taken to
>> reach you, from the original sender.
>>
>> You may then be able to block the emails using the
>> domain name(s) in the headers.
>
> The TMDA documentation for filters seems to be saying that from-file
> only checks the from email address and does not check the real domains
> of the MTAs involved.
>

That's correct, but you can also block on the content of the 
email headers, using a rule like this in your tmda incoming 
file:

# unacceptable regex matches for other mail header fields
## headers-file ~/.tmda/filters/headers_reject deliver=spam <at> fixingemail.org

(Continue reading)

Keith Roberts | 28 Apr 2009 06:49
Favicon

Re: Blacklisting the originating MTA

On Mon, 27 Apr 2009, Doug Hardie wrote:

> To: tmda-users <at> lists.sourceforge.net
> From: Doug Hardie <bc979 <at> lafn.org>
> Subject: Re: Blacklisting the originating MTA
> 
> In article <alpine.BSF.2.00.0904280038170.99030 <at> phoenix.jeff.net>,
> Jeff LaCoursiere <jeff <at> jeff.net> wrote:
>
>> On Mon, 27 Apr 2009, Doug Hardie wrote:
>>
>>> In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
>>> Keith Roberts <keith <at> karsites.net> wrote:
>>>
>>>> Try viewing the full headers of the specific emails you want
>>>> to block.
>>>>
>>>> You should be able to see the path the email has taken to
>>>> reach you, from the original sender.
>>>>
>>>> You may then be able to block the emails using the
>>>> domain name(s) in the headers.
>>>
>>> The TMDA documentation for filters seems to be saying that from-file
>>> only checks the from email address and does not check the real domains
>>> of the MTAs involved.
>>>
>>
>> Use the "header" filter instead (this is in my .tmda/filters/incoming
>> file):
(Continue reading)

Doug Hardie | 28 Apr 2009 18:50
Favicon

Re: Blacklisting the originating MTA

In article <alpine.LFD.2.00.0904280540460.9024 <at> www.karsites.net>,
 Keith Roberts <keith <at> karsites.net> wrote:

> On Mon, 27 Apr 2009, Doug Hardie wrote:
> 
> > To: tmda-users <at> lists.sourceforge.net
> > From: Doug Hardie <bc979 <at> lafn.org>
> > Subject: Re: Blacklisting the originating MTA
> > 
> > In article <alpine.BSF.2.00.0904280038170.99030 <at> phoenix.jeff.net>,
> > Jeff LaCoursiere <jeff <at> jeff.net> wrote:
> >
> >> On Mon, 27 Apr 2009, Doug Hardie wrote:
> >>
> >>> In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
> >>> Keith Roberts <keith <at> karsites.net> wrote:
> >>>
> >>>> Try viewing the full headers of the specific emails you want
> >>>> to block.
> >>>>
> >>>> You should be able to see the path the email has taken to
> >>>> reach you, from the original sender.
> >>>>
> >>>> You may then be able to block the emails using the
> >>>> domain name(s) in the headers.
> >>>
> >>> The TMDA documentation for filters seems to be saying that from-file
> >>> only checks the from email address and does not check the real domains
> >>> of the MTAs involved.
> >>>
(Continue reading)

Doug Hardie | 28 Apr 2009 18:52
Favicon

Re: Blacklisting the originating MTA

In article <alpine.LFD.2.00.0904280511070.6998 <at> www.karsites.net>,
 Keith Roberts <keith <at> karsites.net> wrote:

> On Mon, 27 Apr 2009, Doug Hardie wrote:
> 
> > To: tmda-users <at> lists.sourceforge.net
> > From: Doug Hardie <bc979 <at> lafn.org>
> > Subject: Re: Blacklisting the originating MTA
> > 
> > In article <alpine.LFD.2.00.0904262245180.1689 <at> www.karsites.net>,
> > Keith Roberts <keith <at> karsites.net> wrote:
> >
> >> Try viewing the full headers of the specific emails you want
> >> to block.
> >>
> >> You should be able to see the path the email has taken to
> >> reach you, from the original sender.
> >>
> >> You may then be able to block the emails using the
> >> domain name(s) in the headers.
> >
> > The TMDA documentation for filters seems to be saying that from-file
> > only checks the from email address and does not check the real domains
> > of the MTAs involved.
> >
> 
> That's correct, but you can also block on the content of the 
> email headers, using a rule like this in your tmda incoming 
> file:
> 
(Continue reading)


Gmane