On Sun, Jul 07, 2002 at 10:53:27AM -0500, Skip Montanaro wrote: | Should there be a test for domains from which | lots of spam tends to originate?
| I know about the forged hotmail received
| rules. I seem to get lots of Portuguese spam which originates in Brazilian
| domains (at least they appear in the Received: headers). Here are the
| headers from one:
|
| Return-Path: <[EMAIL PROTECTED]>
| Received: from terra.com.br ([210.21.102.67])
Oh, terra.com. I get lots of copies of klez from, let's see,
[EMAIL PROTECTED], and my system filter fails (bounces) the
delivery each time. That has been going on for a month of more now.
Same exact address every time (envelope sender).
I wonder if the two domains are related at all.
(interesting, terra.com.br has whois info, but terra.com.gt doesn't)
| Do people have local rules to deal with this sort of stuff?
Since my junk from there is already hit by the klez (etc.) filter, no.
I do have a local MTA-level ban on a certain DSL customer in Spain who
keeps spamming me (and some non-existant users).
-D
--
"GUIs normally make it simple to accomplish simple actions and
impossible to accomplish complex actions."
--Doug Gwyn (22/Jun/91 in comp.unix.wizards)
http://dman.ddts.net/~dman/
msg07178/pgp00000.pgp
Description: PGP signature
