blacklist non-ASCII text

Vernon Schryver vjs@calcite.rhyolite.com
Sun Aug 28 20:47:12 UTC 2005


For some reason it seems as if a lot more non-English spam is being
sent toward rhylite.com.

I've found that adding --SContent-Type to DCCM_ARGS or DCCIFD_ARGS in
/var/dcc/dcc_conf and the enclosed list to /var/dcc/whiteclnt
reasonable effective.  It's probably unlikely to be useful except
for a vanity domain.

It is easier and in some sense more effective to do the same with a
regular expression filter such as procmail.  However, procmail tends
to be run after the SMTP transaction.  This tactic with dccm rejects
mail with odd character sets (for my provincial tastes) during SMTP
transactions and so avoids bounces or backholed false positives.


Vernon Schryver    vjs@rhyolite.com


# sort -fd
many    substitute Content-Type text/html; charset="big5"
many    substitute Content-Type text/html; charset=big5
many    substitute Content-Type text/html; charset="EUC"
many    substitute Content-Type text/html; charset=EUC
many    substitute Content-Type text/html; charset="euc-kr"
many    substitute Content-Type text/html; charset=euc-kr
many    substitute Content-Type text/html; charset="GB2312"
many    substitute Content-Type text/html; charset=GB2312
many    substitute Content-Type text/html; charset="ISO-2022-JP"
many    substitute Content-Type text/html; charset=ISO-2022-JP
many    substitute Content-Type text/html; charset="ISO-2022-KR"
many    substitute Content-Type text/html; charset=ISO-2022-KR
many    substitute Content-Type text/html; charset="koi8-r"
many    substitute Content-Type text/html; charset=koi8-r
many    substitute Content-Type text/html; charset="ks_c_5601-1987"
many    substitute Content-Type text/html; charset=ks_c_5601-1987
many    substitute Content-Type text/html; charset="SHIFT-JIS"
many    substitute Content-Type text/html; charset="SHIFT_JIS"
many    substitute Content-Type text/html; charset=SHIFT-JIS
many    substitute Content-Type text/html; charset=SHIFT_JIS
many    substitute Content-Type text/html; charset="Windows-1251"
many    substitute Content-Type text/html; charset=Windows-1251
many    substitute Content-Type text/html; charset="x-euc-jp"
many    substitute Content-Type text/html; charset=x-euc-jp
many    substitute Content-Type text/plain; charset="big5"  
many    substitute Content-Type text/plain; charset=big5
many    substitute Content-Type text/plain; charset="EUC"
many    substitute Content-Type text/plain; charset=EUC
many    substitute Content-Type text/plain; charset="euc-kr"
many    substitute Content-Type text/plain; charset=euc-kr
many    substitute Content-Type text/plain; charset="GB2312"
many    substitute Content-Type text/plain; charset=GB2312
many    substitute Content-Type text/plain; charset="ISO-2022-JP"
many    substitute Content-Type text/plain; charset=ISO-2022-JP   
many    substitute Content-Type text/plain; charset="ISO-2022-KR"
many    substitute Content-Type text/plain; charset=ISO-2022-KR
many    substitute Content-Type text/plain; charset="koi8-r"
many    substitute Content-Type text/plain; charset=koi8-r
many    substitute Content-Type text/plain; charset="ks_c_5601-1987"
many    substitute Content-Type text/plain; charset=ks_c_5601-1987
many    substitute Content-Type text/plain; charset="SHIFT-JIS"
many    substitute Content-Type text/plain; charset="SHIFT_JIS"
many    substitute Content-Type text/plain; charset=SHIFT-JIS
many    substitute Content-Type text/plain; charset=SHIFT_JIS
many    substitute Content-Type text/plain; charset="Windows-1251"
many    substitute Content-Type text/plain; charset=Windows-1251
many    substitute Content-Type text/plain; charset="x-euc-jp"
many    substitute Content-Type text/plain; charset=x-euc-jp



More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.