[plug] Spam from The Maverick Partnership

Luke Dudney plug at goa-trance.org
Thu Dec 13 11:27:49 WST 2001


They often use a Reply-To address of a free webmail service like 
china.com, which are easy to block.
Just block those as they come. In postfix's header_checks, I have

/^Reply-To:.*(cometowa at china\.com|invescl at yahoo\.com\.au|ausmarketing at china\.com|adelematyas1535 at excite\.com|heribertobrett1404 at excite\.com)/ 
REJECT

Cheers
Luke


Anthony Jones wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>I suggest you wait outside their mailbox in Northbridge with a can of mace.
>
>But serously folks, if you know their domain (which hopefully will be in your 
>mail headers somewhere) then you can look that up on the Australian domain 
>registry site (which I don't know what that is) and it should give you some 
>contact details.  Often the ISP details are here also.
>
>Also you can try to find out their IP address (mail headers again) and do a 
>reverse lookup on it.  This will help if they have more than one domain 
>registered to that IP address.  You can also look to see what else is on the 
>same subnet. If they have an ip address say:
>
>203.59.163.86 (which is mine at the moment)
>
>tj at kandinski:~$ host 203.59.163.86 
>Name: i163-086.nv.iinet.net.au
>Address: 203.59.163.86
>
>Host reveals that I'm on iinet.  You can try other IP addresses in the range:
>203.59.163.x and they will usually be the same ISP.
>
>Anthony Jones
>




More information about the plug mailing list