Milter-greylist

--- In milter-greylist@yahoogroups.com, Emmanuel Dreyfus <manu@...> wrote:
>
> Hi
> 
> This is not related to milter-greylist, but perhaps you guys have some
> expericence on the topic:
> 
> My domain is under a flood of spams for viagra. All the messages are 
> different. The only thing they have in common is that the URL they
> contain resolve to the same IP address (the domain name of the URL is
> also different on each spam I saw). The IP is 211.144.68.87, FWIW.
> 
> In order to filter that, I should grab the URL from the message, 
> resolve the address and blacklist if it's the infamous IP. 
> 
> That's not easy to do. Anyone knows a tool that already do that kind
> of thing? 
> 

Hi,

http://www.snertsoft.com/sendmail/milter-link/

may help you.

Or spamassassin, which  uses SURBLs.

Ugo

> I thought I could use a shell script hooked to a honeypot address to
> collect all the domains resolving to this IP, and use milter-regex to
> reject the messages containing the URL containing them, but it still
> looks rather unefficient.
> 
> -- 
> Emmanuel Dreyfus
> manu@...
>