Robert Schetterer wrote: > spam often is very recipient related > i.e my beloved spambot armee relocated from china/us now to india/brasil > during last year , looks like thats trendy
regarding BR we get most from afrinic 41.0 and pakistan 182.177, and of course our own adsl blocks if you like to prevent brazil origin you could block any adsl source since this addresses are not supposed to run a valid MTA if you're interested you could block connection from all rDNS IPs faking to be an MTA and resolving to domain names which follow, each at least several /16 if not /8 blocks .virtua.com.br .dsl.telesp.net.br .gvt.net.br .vivotorpedo.com.br .user.veloxzone.com.br .speedy.com.ar .fibertel.com.ar .adsl.terra.cl .prima.com.ar some small sub blocks may have been relocated to other services and are still not updated because of sloppy maintenance of the telco personal but this problem is probably not relevant for europe Hans -- XTrade Assessory International Facilitator BR - US - CA - DE - GB - RU - UK +55 (11) 4249.2222 http://xtrade.matik.com.br
