On 07/11/06, John Jetmore <jetmore@???> wrote: > But commonness is not a sign of lack of quality in itself. You have not
> presented anything that attacks my position that a single IP (especially
> in the case of load balancers or firewall PAT addresses) can generate
> multiple HELO strings to a single server.
They can, but a look at the stats relating to that behaviour would
probably[1] reveal a big bias towards spamminess, since this is a
trait of some zombies.
It's certainly not a red card, but it might be a yellow.