Is it possible they are coming from zombie machines?  Machines which
have been infected by a sort of virus which a spammer can take over
and send out mail from remotely.

Michael Grant

On 4/4/07, J. <[EMAIL PROTECTED]> wrote:

--- Matt Kettler <[EMAIL PROTECTED]> wrote:

> J. wrote:
> > I've been doing this sort of thing to block connections which is
> > somewhat more satisfying than just scoring the email higher, but
> these
> > rascals seems to be able to use multiple ip addresses even within a
> > single mailing:
> >
> > 123.156.189.:allow,RBLSMTPD="-Connections refused. domain.com seems
> to
> > ignore bounces."
> > 87.254.321.:allow,RBLSMTPD="-Connections refused due to spam."
>
> Do they have a common reverse DNS?

Good question. They probably do if they're running email lists and want
the messages to get through. They always seems to come through with low
scores so I assume they've got spf and reverse dns set up right.



____________________________________________________________________________________
No need to miss a message. Get email on-the-go
with Yahoo! Mail for Mobile. Get started.
http://mobile.yahoo.com/mail

Reply via email to