----- Original Message ----- From: "Kevin Bilbee" <[EMAIL PROTECTED]>
> Darin got it correct I was pointing this out becuse some on this list > suggested the blocking an email that has an ip for its hello is not a good > way to block spam. I personally think it is. > > Using HELOISIP or CONTAINSIP is a valid blocking method. If the ip is well > formed [x.x.x.x] I check it against the ip of the connecting servers ip > address if they match I let it through, do not get many spams this way. > Yesterday 346 messages where ip addresses as the helo that is 9% of our > total volume. > > And posting the methods the spammers are using to try to get past spam > blocking is definitly an interest to us all. Maybe so. But I just think that there are some clear telltale signs of spam, and that if they are found, then why not simply reject the message right then and move on. Why do you need further validation that the message is spam? Anyway, just my 2 cents... Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
