Brian Spraker | 4 Aug 2012 04:19
Picon
Favicon

Checking the "local_part" of a Sender

Hello all,

I know that you can check the "local_part" of a recipient, but how can you check this for a sender?

In essence, there seems to be a lot of spam e-mail coming in.  They all have the same "local_part" but the
domain name is different.

So it would be nice if there is a way to block this.

I've seen where people setup something like:

deny
senders = sender <at> *

Where a wildcard is used.

But, I have a MySQL database that is setup for checking sender addresses.  This means it has to be an exact match.

Is there already a variable that is used to hold the "local_part" of a sender?  I've done a lot of digging and am
unable to find one.

Thank you!

Brian S.

--

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

(Continue reading)

Duane Hill | 4 Aug 2012 04:29
Picon

Re: Checking the "local_part" of a Sender

On Saturday, August 04, 2012 at 02:19:05 UTC, spraker <at> yahoo.com confabulated:

> Hello all,

> I know that you can check the "local_part" of a recipient, but how can you check this for a sender?

> In essence, there seems to be a lot of spam e-mail coming in.  They
> all have the same "local_part" but the domain name is different.

> So it would be nice if there is a way to block this.

> I've seen where people setup something like:

> deny
> senders = sender <at> *

> Where a wildcard is used.

> But, I have a MySQL database that is setup for checking sender
> addresses.  This means it has to be an exact match.

> Is there already a variable that is used to hold the "local_part"
> of a sender?  I've done a lot of digging and am unable to find one.

From an answer posted to a question on  this list a couple days ago:

$sender_address_local_part

See http://www.exim.org/exim-html-current/doc/html/spec_html/ch11.html

(Continue reading)

Brian Spraker | 4 Aug 2012 04:55
Picon
Favicon

Re: Checking the "local_part" of a Sender


--- On Fri, 8/3/12, Duane Hill <duihi77 <at> gmail.com> wrote:

> From: Duane Hill <duihi77 <at> gmail.com>
> Subject: Re: [exim] Checking the "local_part" of a Sender
> To: exim-users <at> exim.org
> Date: Friday, August 3, 2012, 9:29 PM
> On Saturday, August 04, 2012 at
> 02:19:05 UTC, spraker <at> yahoo.com
> confabulated:
> 
> > Hello all,
> 
> > I know that you can check the "local_part" of a
> recipient, but how can you check this for a sender?
> 
> > In essence, there seems to be a lot of spam e-mail
> coming in.  They
> > all have the same "local_part" but the domain name is
> different.
> 
> > So it would be nice if there is a way to block this.
> 
> > I've seen where people setup something like:
> 
> > deny
> > senders = sender <at> *
> 
> > Where a wildcard is used.
> 
(Continue reading)

Todd Lyons | 4 Aug 2012 05:41
Gravatar

Re: Checking the "local_part" of a Sender

On Fri, Aug 3, 2012 at 7:55 PM, Brian Spraker <spraker <at> yahoo.com> wrote:
> And the below line, exim thinks it is trying to compare the domain name with the local part:
>
> senders = ${lookup mysql{select sender from exim_sender_blacklist where `sender` LIKE '${quotemysql:$sender_address_local_part}'}}
>
> I tried using e-mail address "trustedservices <at> me.com" and the debug showed:
>
> does "me.com" match "trustedservices" - no

Can you show us the actual acl rules and the debug output?

...Todd
-- 
The total budget at all receivers for solving senders' problems is $0.
 If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine

--

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Todd Lyons | 4 Aug 2012 05:42
Gravatar

Re: Checking the "local_part" of a Sender

On Fri, Aug 3, 2012 at 8:41 PM, Todd Lyons <tlyons <at> ivenue.com> wrote:
>
> Can you show us the actual acl rules and the debug output?

...because I think it might be on a rule other than the one you think it is.

...Todd
-- 
The total budget at all receivers for solving senders' problems is $0.
 If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine

--

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Brian Spraker | 4 Aug 2012 20:57
Picon
Favicon

Re: Checking the "local_part" of a Sender


------------------------------
On Fri, Aug 3, 2012 10:42 PM CDT Todd Lyons wrote:

>On Fri, Aug 3, 2012 at 8:41 PM, Todd Lyons <tlyons <at> ivenue.com> wrote:
>>
>> Can you show us the actual acl rules and the debug output?
>
>...because I think it might be on a rule other than the one you think it is.
>
>...Todd
>-- 

I managed to get it working.

The rule had to be changed to

Condition = ...

Instead of

Senders = ...

This then allowed an equals comparison to be run against the MySQL query and $sender_address_local_parts.

Brian S.
>The total budget at all receivers for solving senders' problems is $0.
> If you want them to accept your mail and manage it the way you want,
>send it the way the spec says to. --John Levine
>
(Continue reading)

Brian Spraker | 4 Aug 2012 20:57
Picon
Favicon

Re: Checking the "local_part" of a Sender


------------------------------
On Fri, Aug 3, 2012 10:42 PM CDT Todd Lyons wrote:

>On Fri, Aug 3, 2012 at 8:41 PM, Todd Lyons <tlyons <at> ivenue.com> wrote:
>>
>> Can you show us the actual acl rules and the debug output?
>
>...because I think it might be on a rule other than the one you think it is.
>
>...Todd
>-- 

I managed to get it working.

The rule had to be changed to

Condition = ...

Instead of

Senders = ...

This then allowed an equals comparison to be run against the MySQL query and $sender_address_local_parts.

Brian S.
>The total budget at all receivers for solving senders' problems is $0.
> If you want them to accept your mail and manage it the way you want,
>send it the way the spec says to. --John Levine
>
(Continue reading)


Gmane