>> b) rdns for 95.53.111.119 gives >> pppoe.95-53-111-119.dynamic.lenobl.avangarddsl.ru > > This might be covered by Stan Hoeppner's PCRE for dynamic IP ranges: > http://www.hardwarefreak.com/fqrdns.pcre
Additionally, a reliable DNSBL (block list) could be used to detect and block IP addresses which are known spam sources and/or are dynamically assigned. This particular IP address, for example, is listed in the Spamhaus ZEN list (zen.spamhaus.org; http://www.spamhaus.org/zen/). Read the documentation for the "reject_rbl_client" restriction. Rich Wales ri...@richw.org