>-----Original Message----- >From: Gray, Richard [mailto:[EMAIL PROTECTED] >Sent: Tuesday, May 31, 2005 5:11 AM >To: users@spamassassin.apache.org >Subject: FW: Many URLs resolving to few IPs > > >> >> Do you have the "net" tests enabled? >> >> See: >> >> http://www.spamhaus.org/sbl/sbl.lasso?query=SBL25864 >> >> These should be tripping at least the URI_SBL test and just >about any >> other IP based BL you might have added (e.g. >> completewhois, etc.). >> > >I am using the 'net' tests, which does mean that they get stopped >eventually, but this particular spammer seems to be good at switching >domains often enough to get past them. > >The frustrating thing is its just one particular spammer, as the >Messages are suitably similar, and he seems to be targetting only my >Boss and not any of our clients. > >I guess 'the squeakiest wheel gets the grease' is defintely holding >true at the minute :) > >R
It does happen often. And those IPs get noted. We gather info on them often. One IP hd something like 6k of spam domains on it. Chris Santerre System Admin and SARE/URIBL Ninja http://www.rulesemporium.com http://www.uribl.com
