[BUGS] trapping spam from headers

[jonathan michaels]

greetings all ..

i've been looking at todays spam and noticed a, a striking
trend as regards the "From: " line, ever since i made teh
mistake of of subscribing to the freebsd mailing lists with my
'normal world' userid/mailing address, some thing to do with
not want to hide behind a 'kiddie' identity.

well, i've learned my lesson and understand the differernce
between a 'kiddie' identity and having a mailing list identity,
esp' in todays screwed up world.

my question is based on this line

From: "Emilio Ouellette" <lintrappermet at trapper.de>

i'm struggling to understand teh inner workings of what is
called /etc/login.access (freebsd v2.2.5-R) it has come down to
be the same thing in v6.2-R i think.

or does /etc/login.access use some other mechanism from this
header ?

>From lintrappermet at trapper.de Tue Mar  4 21:55:05 2008
Return-Path: <lintrappermet at trapper.de>
Received: from 1.Red-83-34-127.dynamicIP.rima-tde.net (1.Red-83-34-127.dynamicIP.rima-tde.net [83.34.127.1])
	by mail.hostid.com.au (8.11.1/8.11.1) with ESMTP id m24Ast106074
	for <userid at my-hostid.com.au>; Tue, 4 Mar 2008 21:55:01 +1100 (EST)
Received: from [83.34.127.1] by mx00.kundenserver.de; Tue, 4 Mar 2008 14:43:06 +0100
Date: 	Tue, 4 Mar 2008 14:43:06 +0100
From: "Emilio Ouellette" <lintrappermet at trapper.de>
X-Mailer: The Bat! (v3.81.14 Beta) Professional
Reply-To: lintrappermet at trapper.de
X-Priority: 3 (Normal)
Message-ID: <462702110.03409135938168 at trapper.de>
To: userid at my-hostid.com.au
Subject: Instead of our old formula, the new one is more concentrated and alot more powerful
MIME-Version: 1.0
Content-Type: multipart/alternative;


given that most if not all of this information is 'manufactured'
by the sender .. so it is possible to use something like
/etc/login.access to keep this sort of stuff out of teh system.

yes, i understand that tehre are mechanisms like spamassassin
to treat the problem AFTER it has become a problem, in essence
i want to keep this stuff out of teh the system so that i does
not beome a problem. given the now repetative nature of teh
garbage flooding the system. i think it should be possible to
keep it out.

or is this not possible i.e. to use /etc/login.access ?

thoughts appreciated

much kind regards

jonathan 

-- 
================================================================
powered by ..
QNX, OS9 and freeBSD  --  http://caamora com au/operating system
==== === appropriate solution in an inappropriate world === ====