Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - How do I filter out any domain with "adsl
  FAQ FAQ  Forum Search   Register Register  Login Login

How do I filter out any domain with "adsl

 Post Reply Post Reply
Author
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Topic: How do I filter out any domain with "adsl
    Posted: 28 November 2005 at 1:21pm

How do I filter out any domain with "adsl" as domain name? or domains like rr.com?

I have these filters under "Domains", but none seems to work:

(.+\.tmp.+.+\.dsl\-verizon\.net):nondr

(adsl\-.+\-.+\-.+\-.+\..+.(.+)\.(swbell|pacbell)\.net):nondr

(.+\.(client2|client|dhcp|adsl)\..+\.(net|com|biz|org)):nond r

 

Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 30 November 2005 at 10:36am
anybody? Please...
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 02 December 2005 at 12:49pm
Sorry, I didn't mean to be annoying anybody. Is this something that I cannot do or I did not do it right?
Back to Top
Stupid View Drop Down
Senior Member
Senior Member


Joined: 28 November 2005
Status: Offline
Points: 127
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 11:52am

I figured out how to do this:

(.*\..*(dsl|dhcp).*\..*\..*):null
(.(dsl|dhcp).*\..*\..*):null
(.*(dsl|dhcp).*\..*\..*\..*):null

However, the Blacklist domain is NOT the resolved reverse DNS??? It seems to be the fak reply spammers put in. For example, if they put in admin@fbi.gov, the domain is fbi.gov???

Can somebody clear this up for me?

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 12:10pm
I'm not sure what the question is. Please note that a (legitiimate) single mail server can handle/own thousands of domains. So from a single IP address a mail server can send out emails with thousands of different domains. A reverse lookup on the server's IP address will only return a single domain, and so it will not match the remaining thousands. SpamFilter can check for the existance of a reverse DNS entry, but it will not force it to match to the email's domain, as we'd be stopping huge amounts of legitimate mail.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 4:23pm

For example,

IP: 123.123.123.123

Reverse DNS: abc.spammer.com

Reply-To: john@fbi.gov

Now, the Black List domain is what? abc.spammer.com or the fbi.com?

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 4:31pm
It's the email domain, fbi.com.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Stupid View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Stupid Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 7:44pm
Would be nice if it's the reverse DNS domain name. Lots spammers are sending emails via either DSL or cable.
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 December 2005 at 9:19pm
Please see our previous answer in this thread. It's impossible to do as it would block *huge* amounts of legitimate mail. If you're worried about DSL/cable users, several RBL already list dynamic IPs, and SpamFilter can use their MAPS RBL servers to block such emails.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.141 seconds.