> Large numbers of spammers use DKIM. We've been under attack for weeks > now by some outfit who is buying up old, "clean" IP subnets and using it > to spew their non-pharma, really "clean looking" spam onto us - no > RBL/SURBL hits for 3-5 *days*, getting scores from 0.5-3.0 - really > tough - nothing to write content rules for. > > All of it DKIM signed and SPF'ed. I ended up building my own RBL just > so we could catch it :-( > > Well, that's the case for the above-mentioned spam too. All the spam has > links to websites that are part of the same domain as the email - > running on webservers in the same subnets. :-(
really a pathological scenario ! yes...for particular case you end up writing rules....but I think your case is not the general one
