Autor: Marc Perkel Data: Para: exim-users Assunto: Re: [Exim] Reading the nameserver info from remote host
This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
Thank you! I'm thinking that I might try to read that infor and stick it
in a header and then feed it to Spam Assassin or try to track it and see
if I can find some useful patterns. My thinking is that there are major
spammers who may be rotating the IP addresses of the sending hosts - but
the name server records will give them away.
Philip Hazel wrote:
>On Thu, 18 Dec 2003, Marc Perkel wrote:
>
>
>
>>Whould it be possible - or could it be added to exim - a way to look up
>>the nameservers of a given host?
>>
>>
>
>${lookup dnsdb{ns=the.name.of.the.host}{$value}{
> ${lookup dnsdb{ns=the.name.of.the.host.with.first.component.removed} ...
> ... etc.. for a few levels
>
> }}
>
>In other words, you could probably craft a complicated expansion that
>works in many cases. It's a hack, of course.
>
>
> --