The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

I can not block ONE email message...Weihui Chen must die.

Discussion in 'E-mail Discussions' started by ellijay, Jul 3, 2003.

  1. ellijay

    ellijay Active Member

    Joined:
    Dec 3, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    This message has come to me over 1000 times in the past 6 days. Weihui Chen is on my hit-list. It HAS to be something in that charset that's hurting me. Any ideas?

    I have done the following, and it won't quit. I am stumped. I've even restarted Exim in hopes the filter didn't 'apply'...

    Outlook:
    If the message contains 'IBC¼¯×°Í° TO:²É¹º²¿', 'weihui chen', 'chenweihui04@yahoo.com.cn', or 'Plastics & Metals' in the subject, body or header, delete it permanently.


    Exim:
    if error_message then finish endif
    if
    $header_from: is "chenweihui04@yahoo.com.cn"
    or $header_from: is "weihui chen"
    or $header_from: is "chenweihui04@yahoo.com.cn"
    or $message_headers is "weihui chen"
    then
    save /dev/null
    endif


    Yahoo.cn:
    NO RESPONSE



    cPanel.net Support Ticket Number:

    cPanel.net Support Ticket Number:
     
  2. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    Try this:
    Code:
    # Exim filter
    
    if error_message then finish endif
    
    if
        $header_from: contains "yahoo.com.cn"
    then
     save /dev/null
    endif
    cPanel.net Support Ticket Number:
     
  3. ellijay

    ellijay Active Member

    Joined:
    Dec 3, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    Ok, changed it. I'm crossing my fingers. :)

    cPanel.net Support Ticket Number:
     
  4. ellijay

    ellijay Active Member

    Joined:
    Dec 3, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    Didn't work. :(

    This is driving me crazy...

    cPanel.net Support Ticket Number:
     
  5. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    Check the headers. Is it being sent by a local user on the box?

    cPanel.net Support Ticket Number:
     
  6. Website Rob

    Website Rob Well-Known Member

    Joined:
    Mar 23, 2002
    Messages:
    1,506
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    I hate when posting are being done while I'm still composing. :D

    Since my post confirmed using 'yahoo.com.cn' didn't/wouldn't work, I have removed it.

    Do I understand correctly though, Exim v4.x is being used here?
     
    #6 Website Rob, Jul 3, 2003
    Last edited: Jul 3, 2003
  7. ellijay

    ellijay Active Member

    Joined:
    Dec 3, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    They had better hope and pray not.
    :)

    I'll check when I get home.

    cPanel.net Support Ticket Number:
     
  8. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    If you have mail being picked up elsewhere and have the leave messages on the server checked off in your email config; then the cppop caching may be biting you in the ass. You may have on received 1 weird message, but the cache keeps pushing it to you.

    Try this:

    echo -n > /home/username/mail/domain.com/user/.cppop.cache
    chattr +ai /home/username/mail/domain.com/user/.cppop.cache

    cPanel.net Support Ticket Number:
     
  9. ellijay

    ellijay Active Member

    Joined:
    Dec 3, 2002
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    Ok, I've tried it. Hopefully it's that simple!

    [edit: Ok, here's the error:]

    Task 'mail.DOMAIN.com - Receiving' reported error (0x8007000E) : ' The server responded: +OK -1 '

    So, I guess this means there is something there? I'll login to webmail and see if I can delete it, if I see it.

    [edit 2:]
    Err, how do i get my mail to behave normally again? chattr -ai ?
     
    #9 ellijay, Jul 3, 2003
    Last edited: Jul 3, 2003
  10. AlaskanWolf

    AlaskanWolf Well-Known Member

    Joined:
    Aug 11, 2001
    Messages:
    537
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Fremont CA
    if you got their ip, which would be in the headers, just block the ip from the server using iptables or chains

    cPanel.net Support Ticket Number:
     
  11. bbisales

    bbisales Member

    Joined:
    Mar 7, 2003
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    If anyone is interested I have posted some iptable and ipchain rules to block all chinese and korean IPs, usual disclaimer on use at your own risk and we implemented these after getting tired of spam from both china and korea

    iptables link

    ipchains link

    Hope it helps :)

    cPanel.net Support Ticket Number:
     
  12. goodmove

    goodmove Well-Known Member

    Joined:
    May 12, 2003
    Messages:
    624
    Likes Received:
    0
    Trophy Points:
    16
    If you want to block incoming mail from any country without having to maintain a list of IPs try this:

    http://countries.nerd.dk/
     
  13. s3kk3y

    s3kk3y Well-Known Member

    Joined:
    Oct 12, 2002
    Messages:
    94
    Likes Received:
    0
    Trophy Points:
    6
    where do I put:

    # Exim filter

    if error_message then finish endif

    if
    $header_from: contains "yahoo.com.cn"
    then
    save /dev/null
    endif

    And also, if I wanted to keep adding to the filter with domains that I want to block, how would I add it to the code above?

    cPanel.net Support Ticket Number:
     
Loading...

Share This Page