getspam - A script to get the latest list of spammers.
usage: getspam [options]where the options are:
colon seperated list of indices into hash of URLs, currently this is one of aol, mindspring, znet, iocom, nancynet, cyberpromo, llv)
base prefix for split lists, filename for merged list
A short usage message.
split lists into individual files - default is on for 'mailagent' and off for others)
"sendmail" or "mailagent" - default "mailagent"
verbose This utility creates a series of lines that look like
/^((.*[@.])?1floodgate\.com)$/i
/^((.*[@.])?205\.254\.167\.57)$/i which happen to be directly useful in .rules lines that look like this:
<INITIAthe gt manpage Envelope From Sender Relayed Reply-To: "~/.spamlist" {
ANNOTATE -d X-merlyn-spam Smells like spam from %1;REJECT;};
Alternatively, it can produce files ready for the check_mail2 macro in recent sendmail versions, so that one may automatically keep ones spam filter up to date. The default is mailagent format.
This version of the getspam utility has been podified and tweaked by Manoj Srivastava <[email protected]>, based entirely on the work of Scott Blachowicz <[email protected]> (the program structire is mostly his), which, in turn, was inspired by and based on the script posted to the Agent users list by Randal L. Schwartz <[email protected]>.
Known locations for Spam lists There are a number of sites on the network, either on the Web, or anonymous ftp servers, that maintain lists of domains and email addresses that are known to generate spam. The addresses are stored in a hash. Currently valid keys are aol, mindspring, znet, iocom, nancynet, cyberpromo, and llv.
Parsers for raw data There are parsers available internally for some of the sites in the list above to massage the data into a usable format.
Sites that may be mistakenly blocked There is an internal list of sites that have been incorrectly flagged as spamming domains. This can be used to tinker with auto generated lists. None Known so far. Manoj Srivastava <[email protected]>