info about spam messages

[Tayfun ASKER]

Hi David,
  I believe to have some info about the source of spam messages in the 
logs will be usefull for more than one person.
  I am planning to determine the frequent spammers from the From: and ip 
addresses of spam messages and to block only these addresses.
  I am going to install the current release on a test environment right 
now and I am looking forward to see these features in the next stable 
release.

Regards,

Tayfun



David Relson wrote:

> Tom,
> 
> Before I had bogofilter, I had a simple script that would find the first
> ip address in a spam message and create an iptable rule to block port 25
> for that machine.  It worked (I think) though it was somewhat of a
> nuisance to deal with 50 or 100 messages each day.
> 
> As you say, the spammer's real address may not even be in the message.
> However identifying zombies, open relays, etc is of value (I think).  It
> may be that I receive lots of valid email from such machines (zombies,
> et al), but I doubt it.
> 
> With the patch below, "spamitarium -rai < msg.bogofilter.org | grep
> ipad" will print "ipad: 216.144.204.43, asn: 19326" (or comparable
> value).  
> 
> It might be useful for, say, Tayfun.
> 
> Regards,
> 
> David
>