# Brisbane Hosting
#
# Updated and domains verified 12/06/02
# Last reported spam:  12/06/02
# Other Relevant Info:
#
#   12/06/02:
#     Hosts a ton of spammers, including Gnuz World Enterprises.
#     Never heard of any legitimate users.
#
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](202\.56\.3[2-9]\.[0-9][0-9]?[0-9]?|\
          202\.56\.[4-5][0-9]\.[0-9][0-9]?[0-9]?|\
          202\.56\.6[0-3]\.[0-9][0-9]?[0-9]?)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Brisbane Hosting"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@brisbanehosting.com,admin@brisbanehosting.com" \
    -I"Cc: techsupport@intrapower.com.au" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# Cave Creek
#
# Updated and domains verified 6/28/02
# Last reported spam:  5/02/02
# Other Relevant Info:
#    Newsflash 4/14/98 -- disconnected by good.net! :>
#    9/19/98 -- spamming again through throwaway accounts at Bellatlantic. :(
#    6/11/99 -- thoroughly entrenched at Genuity/BBNPlanet. :(
#    6/10/00 -- Still at BBN, still at Genuity, and still spamming.
#    6/28/02 --
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.38\.19[2-9]\.|\
          64\.38\.2[0-4][0-9]\.|\
          64\.38\.25[0-5]\.|\
          cavecreek\.(com|net)([^a-z0-9\.]|$)|\
          cwie\.net([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: Cave Creek"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@cavecreek.com,postmaster@cavecreek.com,postmaster@cavecreek.net,postmaster@cwie.net" \
    -I"Cc: spamtool@level3.com" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# CBB, Inc.
#
# Updated and domains verified 11/01/02
# Other Relevant Info:
#
#   11/01/02:
#    Hosts AdProSolutions/Hi Speed Media.... Can't find contact
#    info in ARIN.  Slimeballs, probably, but just blocked as a precaution.
#
#   2/18/03:
#    Probably =are= HiSpeedMedia. :/  Definitely no legitimate email
#    coming from here.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](12\.42\.17[2-5]\.[0-9][0-9]?[0-9]?|\
                                                      12\.158\.22[4-5]\.[0-9][0-9]?[0-9]?|\
                                                      12\.158\.23[4-7]\.[0-9][0-9]?[0-9]?|\
                                                      209\.150\.7[2-3]\.[0-9][0-9]?[0-9]?|\
                                                      209\.203\.96\.[0-9][0-9]?[0-9]?)
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: CBB Inc."

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse@cotennet.com,postmaster@cotennet.com" \
     -I"Cc: abuse@ip.att.net,abuse@att.net,abuse@twtelecom.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Giant Technologies netblocks
#
# Updated and domains verified 8/17/02
# Last reported spam:  6/30/02
# Other Relevant Info:
#   Hosts a number of porn spam sites.
#   8/13/02 -- reported moved from Yipes.com, but appears to be on the same
#    netblocks as before.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](209\.203\.16[0-9]\.|\
          209\.203\.17[0-5]\.|\
          209\.213\.216\.2)
{
:0 f
| ${FORMAIL} -A"X-SBRule: giantweb.com netblock"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: abuse@giantweb.com,postmaster@giantweb.com" \
    -I"Cc: abuse@uu.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# IDYIA, Inc.
#
# Updated and domains verified 6/28/02
# Last reported spam:  6/24/02
# Other Relevant Info:
#   Hosts haven domains, either AUP/TOS allows haven spamming or they
#   refuse to act on it.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](139\.142\.23[0-1]\.|\
          209\.177\.9[6-9]\.|\
          209\.177\.10[0-9]\.|\
          209\.177\.11[0-1]\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: IDYIA"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@idyia.com" \
    -I"Cc: abuse@gt.ca" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}


# InfoLink (Eddie Marin)
#
# Updated and domains verified 9/26/02
# Other Relevant Info:
#  8/01/02:
#   Hosts a number of spammers, refuses complaints to their abuse@
#   address and directs people to a web form that will not accept
#   sufficient information for a genuine spam complaint.  IMHO
#   these are probably spammers themselves, but I'm just blocking
#   for now.
#  8/21/02:
#   Disconnected by WCG, moved to UUnet.  Figures. <sigh>
#  9/26/02:
#   Now on Broadwing too.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](64\.251\.[0-9]\.|\
          64\.251\.[1-2][0-9]\.|\
          64\.251\.3[0-1]\.|\
          67\.99\.10[4-7]\.|\
          1ad7bd\.net([^a-z0-9\.]|$)|\
          aibusiness.net([^a-z0-9\.]|$)|\
          emi.net([^a-z0-9\.]|$)|\
          infolink\.com([^a-z0-9\.]|$))
{
 :0 f
 | ${FORMAIL} -A"X-SBRule: InfoLink"

 :0
 { SPAMTAG=yes }

 :0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
  :0
  { SPAMPID=`echo $$` }

  :0 c:
  spamtemp.${SPAMPID}

  :0 c: spamtemp.${SPAMPID}.lock
  | (${FORMAIL} -rt \
     -I"From: ${ALTFROM}" \
     -I"To: abuse200251@infolink.com" \
     -I"Cc: postmaster@infolink.com,abuse@uu.net,abuse@broadwing.net" \
     -A"X-Loop: ${NOLOOP}";\
     cat ${SBDIR}/spam;\
     cat spamtemp.${SPAMPID};\
     ${RM} -f spamtemp.${SPAMPID}) \
     | ${SENDMAIL} -oi -t
 }

 :0
 * SRB ?? yes
 { BOUNCETHIS=yes }
}


# Practical Technology
#
# Updated and domains verified 6/28/02
# Last reported spam:  6/25/02
# Other Relevant Info:
#   Hosts spammers, has no intention of stopping them.
# Status: Active Spammer
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]65\.112\.17[0-1]\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: Practical Technology"

:0
{ SPAMTAG=yes }

:0
 * SRC ?? yes
 * !ADMINTAG ?? yes
 * !BULKTAG ?? yes
 {
 :0
 { SPAMPID=`echo $$` }

 :0 c:
 spamtemp.${SPAMPID}

 :0 c: spamtemp.${SPAMPID}.lock
 | (${FORMAIL} -rt \
    -I"From: ${ALTFROM}" \
    -I"To: postmaster@prac-tech.com" \
    -I"Cc: abuse@qwest.net" \
    -A"X-Loop: ${NOLOOP}";\
    cat ${SBDIR}/spam;\
    cat spamtemp.${SPAMPID};\
    ${RM} -f spamtemp.${SPAMPID}) \
    | ${SENDMAIL} -oi -t
 }

:0
* SRB ?? yes
 { BOUNCETHIS=yes }
}
