I'd stay away from IP's because they can change all of the time. But the problem still is that actual spam comes from those IP's.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Markus Gufler > Sent: Thursday, January 09, 2003 11:48 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc... > > > I'm not sure if I'm right with this: > Should it be possible to determine a list of IP-ranges from > the real outgoung smtp-servers of this popular domains, then > Declude probably can add a new test if this mail (using a > popular from domain) commes from one of this ip-ranges. > > Even if this ip-ranges are very wide (Class C or B) a lot of > spamming servers forging the recipients adress should be caught. > > Markus > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith > > Sent: Thursday, January 09, 2003 5:32 PM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc... > > > > > > What is everyone doing about Hotmail, Yahoo, Juno and other > > web-based mail systems? It's really a catch-22. Hotmail is so > > frequently listed on RBL's and is a large source of spam but > > it's also a large source of legitimate email. > > > > They all seem to fail postmaster and abuse so they're already > > at 6-8 points on most peoples Junkmail. You can't whitelist > > them, and the RBL's usually send them over the edge. > > > > I use Sniffer so I've thought about adding a rule for > > hotmail, yahoo, etc to subtract the sum of postmaster and > > abuse and let message sniffer do some magic on these sites. > > > > Thoughts? > > > > --- > > [This E-mail scanned for viruses by F-Proto Virus Scanner] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the > Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by F-Proto Virus Scanner] > > --- [This E-mail scanned for viruses by F-Proto Virus Scanner] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
