RE: [PHP] Hanmir I'm gonna kill you, you son of a..........

This thread was flagged as probable Sp*am / twitmail at my server because
of the abundance of punctuation in the subject, but on reviewing the sp*am
report, I couldn't belp but look into what this thread must be about.

>that *@hanmir.com is REJECT'd. But for some reason the emails still come
>through. All my other REJECT rules work, but just not this one.

Try using connect:(mailhost).hanmir.com on the LHS of your access db
entry. Be sure to set it to whatever the hanmir mailhost is, and reject it
with an appropriate permanent failure message.

>I can only imagine that the reason is because the address sendmail is
>checking does not end up being hanmir.com. BUT I looked through the
>email headers and the hanmir.com domain is plastered all over the place!
>
>Anyone know what's up?

Well, after this message, I suspect that I may be blessed with an autoreply
that I too can check out.

However, anyone processing mail on a *nix box and has a proper shell
account there (even if you download and handle your email via POP from
there) should seriously consider using PROCMAIL to handle their incoming
email - it's trivial to deal with problem messages. Easy to set up a
"twitlist" to filter out messages from individuals who send autoreplies or
suffer diarrhea of the keyboard. Poof, gone. No further interraction on
your part is necessary.

If they were auto-replies for instance, one might auto forward them to an
abuse account (this here is a rough sketch - I don't have the actual
address of this moron, nor do I know if his domain has an abuse address -
though if he's hosted at some service, the abuse address THERE might be
appropriate - if indeed this "hanmir" is hanmir.com, it looks like an
organization bigger than just one moron sending autoreplies):

:0
* ^From: dufus@hanmir\.com
* !^X-Loop: youraddress@yourdomain\.tld
| formail -A "X-Loop: youraddress@yourdomain.tld" | $SENDMAIL abuse@hanmir.com


With a slightly different invocation, it'd be possible to insert a
complaint message in there and tack the original message and headers onto
the tail end of the body, so that the message to abuse is actually a
repetative complaint about the autoreply.

---
Please DO NOT carbon me on list replies. I'll get my copy from the list.

Sean B. Straw / Professional Software Engineering
Post Box 2395 / San Rafael, CA 94912-2395