Automated spam trap

[mike_p]

Hi

(It's definitely worth asking this question now Mr No-Baloney is back - welcome back Mr Lasman!)

I have some e-mail addresses that were used as one-off addresses on a couple of newsgroups about 5 years ago. There is a ton of SPAM that keeps being sent to them. I'm currently blackholing them but what I'd prefer to do is set up a system for logging the source address of email sent to these addresses, and then use that list as either a source for mail blocking or as a list for KISS to read and block them wholesale.

So...
1/ Anyone know how to configure EXIM to log the IPs to a file?

2/ Anyone know how to
either
configure EXIM to refuse to receive from IPs listed in a file (a local blacklist)
or
configure KISS to block IPs from a list held in a file?

All ideas and suggestions will be greatly appreciated

Mike

 

[mike_p]

To answer my own queston 1: I guess I could forward (via pipe) the emails to a script that logs the IP numbers.

Any more elegant solutions would be welcome!

 

[mike_p]

Ok - I've now found out the answer to question 2 - use the SPAMBLOCKER IP block file.

So far I haven't been using SPAMBLOCKER - foolish me! I've only got a modest server and didn't want to run Spamassassin becasue it's resource intensive. I assumed Spamblocker required SA. I was wrong! Having read more about Spamblocker, it seems it cuts down the workload of SA: so I may reconsider use of SA!.

Many THANKS to JLASMAN.

Still looking for a more elegant solution to insert addresses to the blacklist from the Spamtrap addresses.

 

[nobaloney]

Hmmm.. I thought I'd already responded. Maybe I just dreamt it .

If I were going to set up a local blocklist I'd do exactly what you suggest... I'd pipe through a program.

I have a domain name that used to belong to an ISP... years ago.

Now it's a great domain to use for building blocklists because all it ever gets is tens of thousands of spams a day.

Jeff