From owner-freebsd-isp Fri Sep 12 05:54:34 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id FAA01037 for isp-outgoing; Fri, 12 Sep 1997 05:54:34 -0700 (PDT) Received: from axe.cablenet.net (axe.cablenet.net [194.154.36.65]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id FAA01030 for ; Fri, 12 Sep 1997 05:54:30 -0700 (PDT) Received: from axe (localhost [127.0.0.1]) by axe.cablenet.net (8.8.6/8.6.9) with SMTP id NAA13158; Fri, 12 Sep 1997 13:50:57 +0100 (BST) Message-ID: <34193AB0.2781E494@cablenet.net> Date: Fri, 12 Sep 1997 13:50:57 +0100 From: Damian Hamill Organization: CableNet Ltd X-Mailer: Mozilla 3.0 (X11; I; SunOS 4.1.4 sun4m) MIME-Version: 1.0 To: freebsd-isp@freebsd.org CC: jlewis@fdt.net Subject: spammer used our domain Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@freebsd.org X-Loop: FreeBSD.org Precedence: bulk A spammer recently sent an email to members@aol.com using a bogus from address as a user in our domain. I temporarily blocked emails from aol but I had to remove the block for obvious reasons. I am still getting replies from indignant people. Is there a rule I can add to "check_rcpt" or another rule set to block email from *@aol to postmaster@cablenet.net ? I'm not a ruleset wizz. would this work ? R$+ $: $&f $| $1 R$*@aol.com $| postmaster@cablenet.net $#error $@ 5.7.1 $: "571 sorry" regards damian -- * Damian Hamill M.D. damian@cablenet.net * CableNet & The Landscape Channel * http://www.cablenet.net/ http://www.landscapetv.com/