J. wrote: > I've been doing this sort of thing to block connections which is > somewhat more satisfying than just scoring the email higher, but these > rascals seems to be able to use multiple ip addresses even within a > single mailing: > > 123.156.189.:allow,RBLSMTPD="-Connections refused. domain.com seems to > ignore bounces." > 87.254.321.:allow,RBLSMTPD="-Connections refused due to spam."
Do they have a common reverse DNS?
