Hi We do business with BeFree. We've never actually seen any spam from them (we've seen people spamming using BeFree links, but that's an entirely different kettle of fish). Because of that, I want to get their e-mail when it is truly sent from them to us.
So, if I've got this right, "whitelist revdns .bfast.com" does that for me. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, January 14, 2004 12:13 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Whitelist help bfast.com is only very partially legit, so I wouldn't be counterbalancing their domain. http://groups.google.com/groups?hl=en&lr=&ie=ISO-8859-1&scoring=d&q=bfast.co m+group%3A*abuse*&btnG=Google+Search ValueClick owns BeFree, and recently bought the notorious Rokso listed spam house, Hi-Speed Media to add to their operations. The company generally sends spam for first rate clients from their closely associated operations, but make no bones about it, they are a very high volume host that controls over 10,000 IP's. 64.70.10.64/26 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.10.64 - 64.70.10.127] - 12/26/2003 64.70.17.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.17.0 - 64.70.17.255] - 12/26/2003 64.70.38.156/30 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.38.156 - 64.70.38.159] - 12/26/2003 64.70.54.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.70.54.0 - 64.70.54.255] - 12/26/2003 64.158.223.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.158.223.0 - 64.158.223.255] - 12/26/2003 65.167.38.0/25 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [65.167.38.0 - 65.167.38.127] - 12/26/2003 64.251.4.0/24 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.4.0 - 64.251.4.255] - 12/26/2003 64.251.16.192/27 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [64.251.16.192 - 64.251.16.223] - 12/26/2003 66.117.0.0/19 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.117.0.0 - 66.117.31.255] - 12/26/2003 66.207.130.0/23 ValueClick/BFAST/Hi-Speed Media (SBL10912, 8948, 11533, ROK2762, etc.) [66.207.130.0 - 66.207.131.255] - 12/26/2003 64.251.19.0/24 ValueClick/BFAST/Hi-Speed Media/HBCLB.com (SBL10912, 8948, 11533, ROK2762, etc.)[64.251.19.0 - 64.251.19.255] - 01/04/2004 For places like this, I would recommend only negative weighting what's unique to the list owner, in some cases a header search might be required if the MAILFROM uses the bfast.com domain, i.e. HEADERS -10 CONTAINS from: [EMAIL PROTECTED] I'm not sure if you've verified this either, but I think that PrintPal may buy spamming services, in which case, they picked the right spammer to carry their messages. Matt Robert Grosshandler wrote: >Hi > >I have >Whitelist revdns .befree.com >in my global.cfg. > >The following e-mail didn't get whitelisted. When I check out the >reverse on it, I find that it is pg1bms00.bfast.com > >So, if I add >Whitelist revdns .bfast.com I should be in better shape. Am I missing >anything? > >Received: from PG1BMS00.BEFREE.COM [66.207.131.110] by smtp.igive.com >with ESMTP > (SMTPD32-8.05) id AF8C64470020; Tue, 13 Jan 2004 14:05:32 -0600 >Received: from omitted by PG1BMS00.BEFREE.COM (LSMTP for Windows NT >v1.1b) with SMTP id <[EMAIL PROTECTED]>; Tue, 13 Jan 2004 >15:20:58 -0500 >Date: Tue, 13 Jan 2004 13:50:00 -0500 >From: [EMAIL PROTECTED] >Subject: Printpal.com January Affiliate News >To: <[EMAIL PROTECTED]> >MIME-Version: 1.0 >Content-Type: text/html; charset="iso-8859-1" >Content-Transfer-Encoding: 8bit >Message-Id: <[EMAIL PROTECTED]> > >--- >[This E-mail scanned for viruses by Declude Virus] > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >"unsubscribe Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > > > > -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
