[Esd-l] Discouraging SECURITY_NOTIFY_SENDER

[John D. Hardin]

On Wed, 10 Sep 2003, Sergio Cesar wrote:

> Have a case here of a local ISP that could care less that several
> of their customers are infected and spewing traffic. He did not do
> a thing until I started to manually forward every warning I got to
> him.. he fixed the problem in 1 hour. :)

That'd be fairly easy to do in Procmail:

(inserted into "action" block of local-rule...)

:0
* ^Received:.\[111\.222\.33\.[0-9]+\]
! postmaster at cluelessadmin.com


:)


--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
What nuts do with guns is terrible, certainly. But what evil or crazy
people do with *anything* is not a valid argument for banning that item.
                                  -- John C. Randolph <jcr at idiom.com>
-----------------------------------------------------------------------
   11 days until Galileo is deorbited