On 04/10/2018 04:47 PM, Leandro wrote:
2018-04-10 17:49 GMT-03:00 Motty Cruz <motty.c...@gmail.com
<mailto:motty.c...@gmail.com>>:
I apologize here is the email headers and body
https://pastebin.com/bgXrfKaQ
You should not take this domain mrface.com <http://mrface.com> seriously
because it is a TLD used for free dynamic IP service (changeip.com
<http://changeip.com>).
There is even a fake Windows Update domain in this TLD:
ubuntu@matrix:~$ dig +short A windowsupdate.mrface.com
<http://windowsupdate.mrface.com>
185.133.40.63
Thanks,
I noticed it was listed on the DBL dnsbl.spfbl.net and was just working
to add that to my local rules. Anyone know how to set this DBL up in
SA? I am trying to find an example in the stock SA rules now...
--
David Jones
