Vernon Schryver
vjs@calcite.rhyolite.com
Tue, 16 Apr 2002 14:55:22 -0600 (MDT)
One other thing that would have rejected this spam is blacklisting
mail with missing or null Message-IDs at azog.public.hq.nasa.gov
See the notes in the sample whitecommon file at
http://www.rhyolite.com/anti-spam/dcc/dcc-tree/homedir/whitecommon
about "many message-id <>"
Of course, since I doubt azog.public.hq.nasa.gov is running
a DCC client and if it were, it might not be able to reject
broken mail from qmail, this is moot for this particular spam.
....
About white lists in general and the sample whitecommon in particular,
I'm trying to deprecate white list entries based on host names.
IP white or blacklisting does not work when target is beyond an SMTP relay.
Resolving host names takes time and often causes grief. So does anyone
have suitable white list tags such as envelope From values for these?
# Microsoft mailing lists
ok ip discuss.microsoft.com
# SANS mailing lists
ok ip sans.org
I don't remember where I picked them up.
Vernon Schryver vjs@rhyolite.com