problem blacklist filter

Need help? Ask here.

Moderator: Moderators

Post Reply
wkuypers
Posts: 79
Joined: Mon Nov 28, 2005 4:34 am

problem blacklist filter

Post by wkuypers »

Hello,

We have a blacklist for the domain news-companeo.be. However we still receive emails from them. Here under the email in the log and the header of the email. The header of the email indicates a different from than in the Rollernet maillogs for the domain. Is there no way to black also this kind of emails ?

Rollernet maillog :
From: do-885-4009596-140424-4--info.pragmacom.be@return.dolist.net
To: info@pragmacom.be
Date: 2008-01-08 12:08:31

Header of email
Received: from mail.rollernet.us (unknown [208.11.75.2])
by sv6.pragmacom.be (Postfix) with ESMTP id 175D8209F7B
for <info@pragmacom.be>; Tue, 8 Jan 2008 12:05:06 +0100 (CET)
Received: from mail.rollernet.us (localhost [127.0.0.1])
by mail.rollernet.us (Postfix) with ESMTP id 51C21589567C
for <info@pragmacom.be>; Tue, 8 Jan 2008 03:08:31 -0800 (PST)
Received: from pm1011.do08.net (pm1011.do08.net [62.39.111.166])
by mail.rollernet.us (Postfix) with ESMTP
for <info@pragmacom.be>; Tue, 8 Jan 2008 03:08:25 -0800 (PST)
Errors-To: <do-885-4009596-140424-4--info.pragmacom.be@return.dolist.net>
Reply-To: "Info Companeo" <customer-service@news-companeo.be>
Mime-Version: 1.0
Content-Type: text/html; Charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
List-Server: DOLIST Server Pro 4.15.15 B8519
List-Help: <mailto:dolist@pro-02.dolist.net?body=help%20companeo-be>
List-Unsubscribe: <mailto:dolist@pro-02.dolist.net?body=leave%20companeo-be>
List-Subscribe: <mailto:dolist@pro-02.dolist.net?body=join%20companeo-be>
List-Post: <mailto:companeo-be@pro-02.dolist.net>
List-Owner: <mailto:slemmens@companeo.com>
List-Archive: <mailto:dolist@pro-02.dolist.net?body=search%20companeo-be%20date%202008-01-07>
List-Info: Newsletter
X-DOLIST-Unsubscribe: Pour quitter COMPANEO-BE, envoyer 'leave ' dans un mail a 'dolist@pro-02.dolist.net'
From: "Info Companeo" <customer-service@news-companeo.be>
To: "" <info@pragmacom.be>
Date: Tue, 08 Jan 2008 12:05:00 +0100
Subject: =?iso-8859-1?Q?Uw_goed_voornemen:_een_koffie=2D_of_frisdrankautomaat_voor_uw_klanten_installeren=2E?=
Message-Id: <478359A7.000006E0@pm1011.do08.net>
X-Rollernet-Spf: tagging disabled
X-Rollernet-Abuse: Processed by Roller Network Mail Services. See our abuse policy at http://rollernet.us/abuse.php
X-Rollernet-Tracking: Tracking ID 422f.478359a9.b546c.0
RollerNetSupport
Site Admin
Posts: 598
Joined: Wed Nov 17, 2004 10:05 pm
Location: Nevada
Contact:

Post by RollerNetSupport »

The blacklist domain function only checks the SMTP "MAIL FROM" address, which is what is shown in the logs. The other "From" address is an arbitrary header in the message, although we can add a header-matching check into the content filter stage.
Technical Support support@rollernet.us
Roller Network LLC
wkuypers
Posts: 79
Joined: Mon Nov 28, 2005 4:34 am

Post by wkuypers »

glendale2x wrote:The blacklist domain function only checks the SMTP "MAIL FROM" address, which is what is shown in the logs. The other "From" address is an arbitrary header in the message, although we can add a header-matching check into the content filter stage.
That would be nice.
wkuypers
Posts: 79
Joined: Mon Nov 28, 2005 4:34 am

Post by wkuypers »

Hello,

A little up on the subject for the blackfilter.
The spammers are getting more and more emails through bypassing the mail from field.
Is it possible to add the check for all domains in the blacklist table on reply-to and other from fields as described in previous mails ?

Thanks
Post Reply