# CHECK-BODY-DOMAIN-CIDR.RC # # Function to analyze the IPs derived from resolving the # hosts in message body URIs to see if they belong to the # specified spammer. # # Check first body host IP (FIRSTBODYHOSTIP). # :0 * ! FIRSTBODYHOSTIP ?? ^000\.000\.000\.000$ { LT2=no LOCALIP=${FIRSTBODYHOSTIP} LOCALIPREGEXP=${FIRSTBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${FIRSTBODYHOST} at IP: ${FIRSTBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check second body host IP (SECONDBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! SECONDBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! SECONDBODYHOSTIP ?? ${FIRSTBODYHOSTIP} { LT2=no LOCALIP=${SECONDBODYHOSTIP} LOCALIPREGEXP=${SECONDBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${SECONDBODYHOST} at IP: ${SECONDBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check third body host IP (THIRDBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! THIRDBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! THIRDBODYHOSTIP ?? ${FIRSTBODYHOSTIP} * $ ! THIRDBODYHOSTIP ?? ${SECONDBODYHOSTIP} { LT2=no LOCALIP=${THIRDBODYHOSTIP} LOCALIPREGEXP=${THIRDBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${THIRDBODYHOST} at IP: ${THIRDBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check fourth body host IP (FOURTHBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! FOURTHBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! FOURTHBODYHOSTIP ?? ${FIRSTBODYHOSTIP} * $ ! FOURTHBODYHOSTIP ?? ${SECONDBODYHOSTIP} * $ ! FOURTHBODYHOSTIP ?? ${THIRDBODYHOSTIP} { LT2=no LOCALIP=${FOURTHBODYHOSTIP} LOCALIPREGEXP=${FOURTHBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${FOURTHBODYHOST} at IP: ${FOURTHBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check fifth body host IP (FIFTHBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! FIFTHBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! FIFTHBODYHOSTIP ?? ${FIRSTBODYHOSTIP} * $ ! FIFTHBODYHOSTIP ?? ${SECONDBODYHOSTIP} * $ ! FIFTHBODYHOSTIP ?? ${THIRDBODYHOSTIP} * $ ! FIFTHBODYHOSTIP ?? ${FOURTHBODYHOSTIP} { LT2=no LOCALIP=${FIFTHBODYHOSTIP} LOCALIPREGEXP=${FIFTHBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${FIFTHBODYHOST} at IP: ${FIFTHBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check sixth body host IP (SIXTHBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! SIXTHBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! SIXTHBODYHOSTIP ?? ${FIRSTBODYHOSTIP} * $ ! SIXTHBODYHOSTIP ?? ${SECONDBODYHOSTIP} * $ ! SIXTHBODYHOSTIP ?? ${THIRDBODYHOSTIP} * $ ! SIXTHBODYHOSTIP ?? ${FOURTHBODYHOSTIP} * $ ! SIXTHBODYHOSTIP ?? ${FIFTHBODYHOSTIP} { LT2=no LOCALIP=${SIXTHBODYHOSTIP} LOCALIPREGEXP=${SIXTHBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${SIXTHBODYHOST} at IP: ${SIXTHBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc # Check seventh body host IP (SEVENTHBODYHOSTIP). # LT3=no :0 * SPAMTAG ?? yes { LT3=yes } :0 * SBCONFIG ?? (Analyze|Debug) { LT3=no } :0 * LT3 ?? no * ! SEVENTHBODYHOSTIP ?? ^000\.000\.000\.000$ * $ ! SEVENTHBODYHOSTIP ?? ${FIRSTBODYHOSTIP} * $ ! SEVENTHBODYHOSTIP ?? ${SECONDBODYHOSTIP} * $ ! SEVENTHBODYHOSTIP ?? ${THIRDBODYHOSTIP} * $ ! SEVENTHBODYHOSTIP ?? ${FOURTHBODYHOSTIP} * $ ! SEVENTHBODYHOSTIP ?? ${FIFTHBODYHOSTIP} * $ ! SEVENTHBODYHOSTIP ?? ${SIXTHBODYHOSTIP} { LT2=no LOCALIP=${SEVENTHBODYHOSTIP} LOCALIPREGEXP=${SEVENTHBODYHOSTIPREGEXP} INCLUDERC=${SBDIR}/functions/check-cidr.rc :0 * LT2 ?? yes { LOCALTAG=yes SBLOG="C3R-${TESTNAME} (Body Host: ${SEVENTHBODYHOST} at IP: ${SEVENTHBODYHOSTIP})" INCLUDERC=${SBDIR}/functions/loglevel.rc } } # Test to see if Spam Threshold has been reached # INCLUDERC=${SBDIR}/functions/test-threshold.rc