Sneaky one. Try this to locate spam

Attached are two scripts: mailsum and d2e.

Run mailsum to get the domains from which you get email then pipe that into d2e like this:

mailsum -d | d2e

It isn't perfect but you will get a list of each domain from whom your received email and the ip addresses of those mail servers. Simply cut and paste the evil ip addresses into your blocked IP addresses page. Really great way to find who the dirt balls are fast. You can probably clean this up and write a sed script to harvest IP addresses.

You will need to edit mail_summary.sh to change the references to your stuff to make it work (its set up for our domain name of customer 1st). You will also need to set up the aliases properly for mailsum and d2e to be properly recognized.

Hope this helps. Works great. This could be great if we all started to build a collective list of spammer addresses. This is how I have harvested most of the IP addresses at http://www.customer1st.com/AntiSpam

John
--
It's what you do, not what you say.
If you're not part of the future, then stay out of the way.
-John Cougar Mellencamp

John Sievert
Customer 1st, Inc
2950 Metro Drive, Suite 101
Minneapolis, MN 55425
(952)851-7901
mailto:john@xxxxxxxxxxxxxxx

Content-type: application/octet-stream; name="mail_summary.sh"
Content-disposition: attachment

Attachment converted: Green iMac:mail_summary 1.sh (????/----) (00143239)
Content-type: application/octet-stream; name="d2e.sh"
Content-disposition: attachment

Attachment converted: Green iMac:d2e.sh (????/----) (0014323A)