I would gladly block that 38.113.3.xx address in postfix like I blocked
those other 2000 ip-segments but.. they are not the actual sender. They
relay it to spambots I think:
Received: from 127ppp11.telegraph.spb.ru (127ppp11.telegraph.spb.ru
[213.158.11.127])
by *** (Postfix) with ESMTP id 9015D15E0E6;
Sun, 12 Jun 2005 20:00:49 +0200 (CEST)
Received: from phreaker.net (mx1.phreaker.net [38.113.3.77])
by 127ppp11.telegraph.spb.ru (Postfix) with ESMTP id DIW58CSCCV
for <***>; Sun, 12 Jun 2005 13:09:57 +0000
So I had to reject it using a header-check in postfix.
Menno
>> Received: from bonbon.net (mx2.bonbon.net [38.113.3.55])
>> Received: from bonbon.net (mx3.bonbon.net [38.113.3.75])
>> Received: from gamebox.net (mx1.gamebox.net [38.113.3.68])
> *snip*
>
> That subnet is listed in spews. Block away!
>
> http://spews.org/html/S2888.html
>
> http://www.completewhois.com/cgi-bin/whois.cgi?query=38.113.3.57
