Hi Kevin

Lots you could do - to wack this guy you could have a filter that that said
REMOTEIP END NOTCONTAINS   65.249.245.
REVDNS 0 CONTAINS csh.

I am not sure if REMOTEIP or REVDNS or MAILFROM is appropriate but you get the idea..

In addition you could have an ipfile that you could list these particular ip's...

-Nick



Kevin Rogers wrote:

Some of our users are getting a lot of spam from various domains that all have this in the beginning: csh

Like:

csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]

I have the Pro versions of every Declude product. How would I go about adding some weight to emails from this domain? - Should I somehow use the csh. property or the first three parts of the IP address 65.249.245.?

Thanks

---
[This E-mail was scanned for viruses.]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to