Viktor Dukhovni: > On Mon, Jul 29, 2013 at 09:37:19AM -0700, motty cruz wrote: > > > Hello, users in my domain are getting lots of spam emails from facebook > > such as this update+zj4o40c2_...@facebookmail.com > > > > Received: from facebook.com (unknown [173.200.156.65]) > > by spamfilter.domain.com (Postfix) with ESMTP id CBE9B4562E5; > > Mon, 29 Jul 2013 08:25:32 -0700 (PDT) > > Note, this is not actually from facebook, the mail is a forgery > and may be a phishing scam. ... > If none of the RBLs list this and lots of similar sources, you need > a spam content filter or milter that does.
The IP address is listed at zen.spamhaus.org, bl.spamcop.net, and b.barracudacentral.org, and perhaps more. Wietse