Re: [exim] Filter by IP by domain ACL/filter assistance

On 6/30/06 4:34 AM, "Jeremy Harris" <jgh@???> wrote:

> Tony Finch wrote:
>> I suggested using defer rather than deny because (a) they are spammers and
>> are unlikely to retry,
>
> I think (woolly-level feeling from watching mainlog and
> assorted graphs) that this is unfortunately becoming less
> so.
>
> Whether it's because zombies are starting to use system's
> configured smarthosts, or just spamware is being complexified,
> I can't say.

The primary zombie spam engines I see retrying are the ones operated by one
or more of the fraudulent stock pump and dump scammers. (Note to real
brokerage operations: I'm not talking about you.)

--John