Mail Filters in DA

[tnas]

Has anyone ahd any success in using the filters in DA? I seem to still be getting mail through that I have "word" filters on. Does the whole word have to match, or are partial words also blocked...
If I use the word "block" does it catch "blocked" "blocks" "blocking" ?
I really want to block the word "63.212.169" it seems I get a lot of spam from 63.212.169.nnn I can't use the server block, because the email comes from all sorts of servers, but the reply/opt-out (HA!) address always has that IP part in it. Any ideas? I'm drowning! :evil:

[ozee]

That block of IPs is assigned to Level 3 Communications, Inc. from Broomfield, CO.


OrgName: Level 3 Communications, Inc.
OrgID: LVLT
Address: 1025 Eldorado Blvd.
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US

NetRange: 63.208.0.0 - 63.215.255.255
CIDR: 63.208.0.0/13
NetName: LEVEL4-CIDR
NetHandle: NET-63-208-0-0-1
Parent: NET-63-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.LEVEL3.NET
NameServer: NS2.LEVEL3.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1999-05-28
Updated: 2001-05-30

TechHandle: LC-ORG-ARIN
TechName: level Communications
TechPhone: +1-877-453-8353
TechEmail: ipaddressing@level3.com

OrgAbuseHandle: APL8-ARIN
OrgAbuseName: Abuse POC LVLT
OrgAbusePhone: +1-877-453-8353
OrgAbuseEmail: abuse@level3.com

OrgTechHandle: TPL1-ARIN
OrgTechName: Tech POC LVLT
OrgTechPhone: +1-877-453-8353
OrgTechEmail: ipaddressing@level3.com



I'd forward those emails to their abuse@level3.com address. Make sure the headers are intact - they'll need that information. If this is truly spam (unsolicited commercial email) that is an abuse of their TOS, they'll cancel that account!

[tnas]

I asked the DA forum a similar question and received...

Hello,

I believe that exim defaults to only checking the first 500 characters. So if there is text after that, it won't be checked by the filter. You can add:

message_body_visible = 3500

to the exim's main config settings in the /etc/exim.conf to enable more characters to be checked (note that this will use more resources)

Filters will find partial words, so for example if you set it to filter "oba", and the word "foobar" comes through, it should be caught by the filter.

John

I see that 3500 might be alot, but 500? I have headers on my emails that are that big, so I know the message isn't getting scanned. 1000 might be nice.

I have no clue as to how to access/edit exim's main config in /ext/exim.conf :shock:

Is this available to us lowly users? Or only to the mighty ISP?

[Joe]

I've made those changes

[tnas]

Thanks Joe, In a Dream World, we wouldn't need this, and getting rid of spam would be as easy as clicking UNSUBSCRIBE.

Not all (Not even many) ISP's are as serious about SPAM as HOSTPC is.

Thanks.

[Joe]

Zero Tolerance is the name of the game!