Re: spam from valid spammer domains

2009-04-02 Thread John Hardin
On Thu, 2 Apr 2009, jp wrote: I get email from lots of different domains that have the same USPS mailing address(es) listed, either in Denver CO or Wilmington DE. Some specific rules for those addresses, perhaps? Which leads to the question: would having something analogous to URIBL for mail

Re: spam from valid spammer domains

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 23:08 +0200, Karsten Bräckelmann wrote: > > body AE_STOP_REMOVE5/\bwish\bto\bend\b.{0,20}(?: ... )/i > > I guess you don't get a lot of hits for that one. ;) > > \b is a zero-width assertion, matching a word boundary, but not matching > an actual character. /wish

Re: spam from valid spammer domains

2009-04-02 Thread Karsten Bräckelmann
> body AE_STOP_REMOVE5/\bwish\bto\bend\b.{0,20}(?: ... )/i I guess you don't get a lot of hits for that one. ;) \b is a zero-width assertion, matching a word boundary, but not matching an actual character. /wish\bto/ will never match... -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x7

Re: spam from valid spammer domains

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 16:20 -0400, jp wrote: > We're receiving a bunch of mail from domains that appear built for > spamming. > > Here's an example. > pastelmedal.com spam comes from 66.132.203.125. This address isn't > listed by spamhaus, surbl, or any of 122 blacklists at mxtoolbox.com. Yup.

spam from valid spammer domains

2009-04-02 Thread jp
We're receiving a bunch of mail from domains that appear built for spamming. Here's an example. pastelmedal.com spam comes from 66.132.203.125. This address isn't listed by spamhaus, surbl, or any of 122 blacklists at mxtoolbox.com. The email is here: http://www.midcoast.com/~jp/p.txt I get e