Is there any way to expand on what we categorize as a supicious helo?

For example, an aweful lot of spammers seem to come from hosts that
have the word "dynamic" in the helo.  Some legitmate senders have this
too, so I wouldn't want to set this as an invalid helo, but
suspicious, yes.

Come to think of it, might it be good to have a suspicious HOSTNAME
regex/file so that reverse lookups of the IP could trigger scoring?

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to