On Mon, 8 Jul 2002, Derrick 'dman' Hudson wrote: > On Sun, Jul 07, 2002 at 10:53:27AM -0500, Skip Montanaro wrote: > > | Should there be a test for domains from which > | lots of spam tends to originate? > > | I know about the forged hotmail received > | rules. I seem to get lots of Portuguese spam which originates in Brazilian > | domains (at least they appear in the Received: headers). Here are the > | headers from one: > | > | Return-Path: <[EMAIL PROTECTED]> > | Received: from terra.com.br ([210.21.102.67]) > > Oh, terra.com. I get lots of copies of klez from, let's see, > [EMAIL PROTECTED], and my system filter fails (bounces) the > delivery each time. That has been going on for a month of more now. > Same exact address every time (envelope sender). > > I wonder if the two domains are related at all. > > (interesting, terra.com.br has whois info, but terra.com.gt doesn't) > > | Do people have local rules to deal with this sort of stuff? > > Since my junk from there is already hit by the klez (etc.) filter, no. > I do have a local MTA-level ban on a certain DSL customer in Spain who > keeps spamming me (and some non-existant users).
As far as virii go, I installed AMaViS and H+BDEV AntiVir...takes care of bouncing anything virus, for me, without having to let SA worry about it. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Oh, it's good to be a geek. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
