[leafnode-list] filtering spam articles using the "from" field

Mark lists at greplinux.dyndns.org
Sat May 1 13:42:03 CEST 2004


There is a lot of spam lately that has names in the "from" field such as

jamiescot at su.shawcable.net
deanmartin at wk.shawcable.net
peterreid at vs.shawcable.net

The name and address always changes, however the last part of the 
address is always .shawcable.net.

Is there any way to create a leafnode filter that will reject all posts 
based on the .shawcable.net.

Example headers, (I have removed the subject lines so this email clears 
my smtp filters)

 From - Fri Apr 23 07:18:23 2004
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Path: pd7tw1no!pd7cy2so!shaw.ca!pd7tw2no.POSTED!53ab2750!not-for-mail
Message-ID: <wO8ic.235731$Ig.216728 at pd7tw2no>
From: peterreid at vs.shawcable.net
Newsgroups: 
alt.os.linux.mandrake,alt.os.linux.slackware,alt.os.linux.storm,alt.os.linux.suse,alt.os.linux.turbolinux,alt.os.macos,alt.os.macos.fight-back-for-the-mac,alt.os.multics,alt.os.nachos
Date: Fri, 23 Apr 2004 13:24:44 GMT
Lines: 4
X-Trace-PostClient-IP: 24.87.150.136
NNTP-Posting-Host: 64.59.144.74
X-Complaints-To: abuse at shaw.ca
X-Trace: pd7tw2no 1082726684 64.59.144.74 (Fri, 23 Apr 2004 07:24:44 MDT)
NNTP-Posting-Date: Fri, 23 Apr 2004 07:24:44 MDT
Organization: Shaw Residential Internet
X-Received-Date: Fri, 23 Apr 2004 07:24:44 MDT (pd7tw1no)
Xref: greplinux.dyndns.org alt.os.linux.mandrake:99319 
alt.os.linux.slackware:33071 alt.os.linux.suse:44301


 From - Thu Apr 29 17:47:58 2004
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
Path: pd7tw1no!pd7cy1no!shaw.ca!pd7tw2no.POSTED!53ab2750!not-for-mail
Message-ID: <pMOjc.294879$Ig.32740 at pd7tw2no>
From: deanmartin at wk.shawcable.net
Newsgroups: 
comp.protocols.kermit.misc,comp.protocols.misc,comp.protocols.nfs,comp.protocols.novell,comp.protocols.pcnet,comp.protocols.ppp,comp.protocols.pup,comp.protocols.smb,comp.protocols.snmp
Date: Wed, 28 Apr 2004 13:58:45 GMT
Lines: 804
X-Trace-PostClient-IP: 24.71.4.194
NNTP-Posting-Host: 64.59.129.46
X-Complaints-To: abuse at shaw.ca
X-Trace: pd7tw2no 1083160725 64.59.129.46 (Wed, 28 Apr 2004 07:58:45 MDT)
NNTP-Posting-Date: Wed, 28 Apr 2004 07:58:45 MDT
Organization: Shaw Residential Internet
X-Received-Date: Wed, 28 Apr 2004 07:58:45 MDT (pd7tw1no)
Xref: greplinux.dyndns.org comp.protocols.smb:2550







More information about the leafnode-list mailing list