>>>>> "Alan" == Alan J Flavell <a.flavell@???> writes:
Alan> I've been noticing quite a number of cases where we've been
Alan> offered mail from dnsrbl-clean IPs, but with envelope-sender
Alan> domains which, on investigation, turn out to be professional
Alan> spammers.
Any particular professional spammer?
Alan> After a while, the domains do tend to turn up in
Alan> rhsbl.ahbl.org, but it looks as if there are some gangs who
Alan> create new domain names like wallpaper, all linked to the same
Alan> few IP addresses, and the rhsbl lists can't keep up with them:
Alan> I didn't see an obvious way to rate them in exim ACLs via their
Alan> IP blacklist entries in the way that I describe manually above.
It would be possible to do this in ACLs if only the dnsdb lookup could
be fixed to behave in a controllable manner on deferrals. (It's
possible to do it anyway, but at the cost of permanently deferring all
mail from sites with certain types of DNS problems.)
--
Andrew, Supernews
http://www.supernews.com
