[plug] Spam from The Maverick Partnership
Luke Dudney
plug at goa-trance.org
Thu Dec 13 11:27:49 WST 2001
They often use a Reply-To address of a free webmail service like
china.com, which are easy to block.
Just block those as they come. In postfix's header_checks, I have
/^Reply-To:.*(cometowa at china\.com|invescl at yahoo\.com\.au|ausmarketing at china\.com|adelematyas1535 at excite\.com|heribertobrett1404 at excite\.com)/
REJECT
Cheers
Luke
Anthony Jones wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>I suggest you wait outside their mailbox in Northbridge with a can of mace.
>
>But serously folks, if you know their domain (which hopefully will be in your
>mail headers somewhere) then you can look that up on the Australian domain
>registry site (which I don't know what that is) and it should give you some
>contact details. Often the ISP details are here also.
>
>Also you can try to find out their IP address (mail headers again) and do a
>reverse lookup on it. This will help if they have more than one domain
>registered to that IP address. You can also look to see what else is on the
>same subnet. If they have an ip address say:
>
>203.59.163.86 (which is mine at the moment)
>
>tj at kandinski:~$ host 203.59.163.86
>Name: i163-086.nv.iinet.net.au
>Address: 203.59.163.86
>
>Host reveals that I'm on iinet. You can try other IP addresses in the range:
>203.59.163.x and they will usually be the same ISP.
>
>Anthony Jones
>
More information about the plug
mailing list