[CentOS] please block user

[Valeri Galtsev]

On Wed, August 26, 2015 4:23 pm, Alice Wonder wrote:
>
>
> On 08/26/2015 02:07 PM, Valeri Galtsev wrote:
>> On Wed, August 26, 2015 2:29 pm, Alice Wonder wrote:
>>>
>>>
>>> On 08/26/2015 12:11 PM, g wrote:
>>>> On 08/26/15 13:11, Valeri Galtsev wrote:
>>>>> On Wed, August 26, 2015 12:55 pm, James A. Peltier wrote:
>>>> <<>>
>>>> something no one seems to have mentioned, so i will..
>>>>>> | >> Received: from mx2.loverhearts.com (mx2.loverhearts.com
>>>> loverhearts.com is a single page that seems to do nothing. and there
>>>> is
>> nothing in page source to do anything.
>>>> validator.w3.org shows 1 error and 1 warning showing that page was
>> poorly written.
>>>> so the only harm is spam, which i now have going to my Junk folder.
>>>> so,
>> to all of you, i pass along a much more loving 'love' link;
>>>>     http://lovehearts.com
>>>> enjoy.
>>>
>>> If you look at the SPF record for loverhearts.com (where they are
>>> coming
>> from for me) there are a whole slew of servers permitted to send on
>> their behalf.
>>
>> This way you may block good people. SPF records you used are owned by
>> bad
>> guys: loverhearts.com allows others resend e-mail for themselves, but
>> they
>> do not need permissions of whomever they add to their SPF records to do
>> so. In other words, one shouldn't trust anything what is in the records
>> created by bad guys.
>
> No what I mean is - I get e-mail from example.net
>
> If example.net has an SPF record, I then check all the IPs in the SPF
> record against blacklists and if two or more match, I reject the message
> as spam.
>
> That way if the MTA they are using isn't on a blacklist but others they
> specify in the SPF record are, they get identified as spammer and blocked.
>
> It doesn't matter if they add IP addresses to SPF from others, it
> wouldn't block every IP in the SPF - just check if 2 or more IPs in
> their SPF are on blacklists.
>
> I probably would have to write a custom filter to do that, but it may be
> worth doing.

Oh, then I apparently didn't read your e-mail carefully... which is my
usual mistake ;-)

Valeri

++++++++++++++++++++++++++++++++++++++++
Valeri Galtsev
Sr System Administrator
Department of Astronomy and Astrophysics
Kavli Institute for Cosmological Physics
University of Chicago
Phone: 773-702-4247
++++++++++++++++++++++++++++++++++++++++