Michael Moncur wrote:
These folks are serious spammers. They even register each of the domain names to look legit. Look up findhsm-list-cluster-182-643.com or any of the others, they're all registered to Daily Promotions. (It's a shame a WHOIS lookup would be expensive, or this would make an excellent eval test.)
Hmmm... perhaps a periodic corpus scan, combined with WHOIS lookups to build an rbldns?
Or perhaps a simple query of NS1 or NS2 HSM-EMAIL.NET to see if the server is authoritative for the zone would suffice? That would be much quicker than a WHOIS, and might work really well. Granted, they could change their DNS servers, but changing DNS on all their domains will be more difficult than changing the rule in SA.
--Rich
_________________________________________________________
Rich Puhek
ETN Systems Inc.
2125 1st Ave East
Hibbing MN 55746
tel: 218.262.1130
email: [EMAIL PROTECTED]
_________________________________________________________
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
