[Mimedefang] New spammer trick?

Dave Williss dwilliss at microimages.com
Wed Nov 26 10:14:49 EST 2003


----- Original Message ----- 
From: "Cormack, Ken" <kcormack at acs.roadway.com>
To: <mimedefang at lists.roaringpenguin.com>
Sent: Tuesday, November 25, 2003 1:15 PM
Subject: RE: [Mimedefang] New spammer trick?


> > Out of curiosity, does anyone have a decent list of such domains that
can
> be
> > rejected? I already drop anything which comes from
> > client.comcast.net
> > client.attbi.com
> > client2.attbi.com
>
> Unfortunately, the best source I've found for shutting down connections
> directly from "consumer broadband" and other dynamic IPs was easynet.nl's
> dynablocker blacklist ( http://abuse.easynet.nl/dynablocker.html ).
> However, it is being shut down in a week.  :(
>
You have to be careful when blocking "consumer broadband" that you don't
generalize too much.  RoadRunner, the Time-Warner cable modem service
does "consumer" and "business-class" broadband and both addresses come
through reverse DNS as something.rr.com. The business class addresses
all reverse resolve to something.biz.rr.com, where as consumer addresses
resolve to something like .ne.rr.com (Where the "ne" is regional, in this
case
Nebraska).  We occasionally get irate support emails from people who
claim we never answer their emails, when in fact, their ISP has blindly
blocked all .rr.com emails.  And the fact that some of the spamming
techniques
out there cause us to be flooded with bogus bounce messages makes it hard
to detect real errors.

 -- Dave Williss
------
Meddle not in the affairs of dragons,
   for you are crunchy and taste good with catsup





More information about the MIMEDefang mailing list