uk1host (Dave) wrote:
(1)
Return-Path: <[EMAIL PROTECTED]>
Received: from Wimax-c3-ppy-pt-190-70-170-132.orbitel.net.co
[190.70.170.132] by mail.uk1host.co.uk with SMTP;
Sat, 8 Mar 2008 08:59:14 -060
190.70.170.132 is currently listed on CBL, SpamCop, and ivmSIP. (XBL and
ZEN would also have this via the CBL listing)
ivmSIP listed this on Thursday, March 06, 2008 11:19 AM (eastern)
CBL listed this 2008-03-08 13:00 GMT
SpamCop says "listed for 2.8 days" (from before I check this a few
minutes ago)
I think that CBL/XBL/ZEN *might* have listed this right at the time that
you received this... or just after... but I could be miscalculating
either way by an hour. But that doesn't matter... both SpamCop and
ivmSIP listed this long before you received it.
(2)
Return-Path: <<[EMAIL PROTECTED]>
Received: from 109.Red-88-15-17.dynamicIP.rima-tde.net [88.15.17.109
] by
mail.uk1host.co.uk with SMTP;
Sat, 8 Mar 2008 08:36:19 -060
This one should have easily been blocked by PBL, which is a part of Zen.
So ZEN should have blocked this.
(3)
X-McAfeeVS-TimeoutProtection: 0
Return-Path: <[EMAIL PROTECTED]>
Received: from dsl88-226-51303.ttnet.net.tr [88.226.200.103
] by
mail.uk1host.co.uk with SMTP;
Sat, 8 Mar 2008 07:58:24 -060
This one is currently listed on PBL and CBL and SpamCop. PBL and CBL
both will cause this to be on XBL and ZEN as well. I'm confused by
SpamCop's description of when this was listed by SpamCop. CBL said that
it was listed about 3 hours ago... but, regardless, PBL would have
already had this in Zen long before you received the message. So ZEN
should have easily been enough without anything else.
CONCLUSION:
ALL three of these spams would have been caught with proper use of just
ZEN and SpamCop, assuming that those two lists are implemented correctly
and are scored such that either one alone scores high enough in your
system to outright block an incoming spam.
Rob McEwen
[EMAIL PROTECTED]
