ram wrote:
I am using SA 3.2.3 and very few spam get thru
But I can still see some spam with urls because the the urls are not yet
listed in uribls
I tried to do some analysis on my quarantine, I found atleast some
spammer domains have the same NS records.
Now in my spamassassin can I do a DNS check (on all domains in body-urls
or mail-from, reply-to etc) to find their NS records and score them on
bad NS servers.
What is the risk of FP's because innocent DNS providers may see
themselves getting list
better show an example so that we can see.
if the NS belongs to a spam organization, then it's ok. otherwise, just
because a spammer configures his dns to point to my domain doesn't mean
you can block me!
