🚀 go-pugleaf

W dniu 2019-03-01 o 19:56, Piotr Lechowicz pisze:
> W dniu 2019-02-07 o 00:00, Piotr Lechowicz pisze:
>> W dniu 2019-02-06 o 18:41, LFC pisze:
>>>
>>> Nawiasem mówiąc reguła, którą przytoczyłeś dla X-Report-Abuse 
>>
>> Czyli ta?
>> header /^X-Report-Abuse$/ ,^\s*<http:\/\/\w+\.(com|info|icu)\/aa\.php\?a=,ie
> 
> Dodali nowe domeny, np space, site, fun
> Nie chce mi się tego śledzić, więc uogólniłem regułę:
> 
> header /^X-Report-Abuse$/ ,^\s*<http:\/\/\w+\.\w+\/aa\.php\?a=,ie
> 
> 
> 

W sumie wychodzi dość ograniczony zakres źródłowych adresów/domen (statystyka z miesiąca).
Łatwo można wyciąć całe klasy na firewallu.
Albo w filtrze na connect/helo w MTA.


[134.209.15.47]: paltry.farzamlift.com
[185.149.232.120]: absentee.blazedealer.com
[185.234.183.101]: cannon.myabtb.com
[185.234.183.111]: trip.myabtb.com
[185.234.183.112]: bookshelf.myabtb.com
[185.234.183.115]: punish.myabtb.com
[185.234.183.121]: save.myabtb.com
[185.234.183.123]: beneath.myabtb.com
[185.234.183.125]: knowhow.myabtb.com
[185.234.183.126]: prank.ilinasignage.com
[185.234.183.134]: baby.ilinasignage.com
[185.234.183.135]: double.ilinasignage.com
[185.234.183.136]: invite.ilinasignage.com
[185.234.183.148]: penitent.ilinasignage.com
[185.234.183.160]: radiate.studiogranth.com
[185.234.183.167]: tolerate.studiogranth.com
[185.234.183.190]: zipper.stlexports.com
[185.234.183.191]: condition.stlexports.com
[185.234.183.195]: thunder.stlexports.com
[185.234.183.209]: homemade.stlexports.com
[185.234.183.211]: shaky.stlexports.com
[185.234.183.65]: sack.rajpharsan.com
[185.234.183.66]: thought.rajpharsan.com
[185.234.183.71]: smelly.rajpharsan.com
[185.234.183.72]: wail.rajpharsan.com
[185.234.183.73]: cart.rajpharsan.com
[185.234.183.75]: measure.rajpharsan.com
[185.234.183.76]: reign.rajpharsan.com
[185.234.183.78]: air.rajpharsan.com
[185.234.183.79]: damage.rajpharsan.com
[185.234.183.88]: spray.rajpharsan.com
[185.234.183.90]: cold.rajpharsan.com
[185.234.183.91]: goofy.rajpharsan.com
[185.234.183.96]: dizzy.myabtb.com
[199.189.27.109]: cross.hasanhost.com
[212.162.148.131]: heated.ellehairskin.com
[212.162.148.132]: overdress.ellehairskin.com
[212.162.148.148]: juice.ellehairskin.com
[212.162.148.160]: photocopy.ellehairskin.com
[212.162.148.175]: fetal.ellehairskin.com
[212.162.148.184]: abhorrent.ellehairskin.com
[212.162.148.196]: chase.ellehairskin.com
[212.162.148.212]: zip.ellehairskin.com
[212.162.148.223]: walk.ellehairskin.com
[212.162.148.234]: twelve.ellehairskin.com
[212.162.148.237]: likeable.ellehairskin.com
[212.162.148.238]: punch.ellehairskin.com
[212.162.148.239]: square.ellehairskin.com
[212.162.148.252]: climatic.ellehairskin.com
[23.95.202.205]: volatile.jamihydraulics.com
[23.95.202.214]: page.jamihydraulics.com
[23.95.202.219]: letters.jamihydraulics.com
[77.241.197.206]: penitent.proanimakers.com
[77.241.197.207]: sibling.proanimakers.com
[77.241.197.213]: sickleave.proanimakers.com
[77.241.197.217]: ludicrous.proanimakers.com
[77.241.197.221]: correct.proanimakers.com
[77.241.197.223]: obtain.proanimakers.com
[77.241.197.225]: tolerate.proanimakers.com
[77.241.197.227]: earth.proanimakers.com
[77.241.197.232]: cheap.proanimakers.com
[77.241.197.235]: request.proanimakers.com
[77.241.197.236]: tailor.proanimakers.com
[77.241.197.237]: amusement.proanimakers.com
[77.241.197.240]: pathetic.proanimakers.com
[77.241.197.241]: shock.proanimakers.com
[77.241.197.243]: brass.proanimakers.com
[77.241.197.244]: far.proanimakers.com
[77.241.197.246]: queue.proanimakers.com
[77.241.197.247]: stay.proanimakers.com
[77.81.106.160]: hunt.prantikhowlader.com
[77.81.106.163]: tooth.prantikhowlader.com
[77.81.106.175]: welcome.prantikhowlader.com
[77.81.106.184]: talisman.prantikhowlader.com
[77.81.106.186]: delicious.prantikhowlader.com
[79.142.126.49]: crowd.javanidea.com
[85.93.8.131]: shy.safaethekwini.com
[85.93.8.133]: cactus.safaethekwini.com
[85.93.8.143]: truculent.safaethekwini.com
[85.93.8.146]: higherup.safaethekwini.com
[85.93.8.14]: tank.trapnos.com
[85.93.8.153]: proud.safaethekwini.com
[85.93.8.162]: distinct.safaethekwini.com
[85.93.8.177]: trek.safaethekwini.com
[85.93.8.179]: endurable.safaethekwini.com
[85.93.8.181]: previous.safaethekwini.com
[85.93.8.193]: silly.safaethekwini.com
[85.93.8.205]: town.safaethekwini.com
[85.93.8.206]: black.safaethekwini.com
[85.93.8.212]: colour.safaethekwini.com
[85.93.8.226]: return.safaethekwini.com
[85.93.8.22]: flowers.trapnos.com
[85.93.8.231]: physical.safaethekwini.com
[85.93.8.252]: familiar.safaethekwini.com
[85.93.8.25]: sulky.trapnos.com
[85.93.8.32]: broad.trapnos.com
[85.93.8.73]: half.trapnos.com
[85.93.8.7]: pocket.trapnos.com
[85.93.8.81]: solvent.trapnos.com
[85.93.8.86]: resolute.trapnos.com
[89.144.44.30]: infinite.sharmagarments.com
[89.144.44.36]: ark.sharmagarments.com
[89.144.44.42]: meat.sharmagarments.com
[89.144.44.43]: bleach.sharmagarments.com
[89.144.44.47]: nice.sharmagarments.com
[89.144.44.52]: palliate.sharmagarments.com