In from_senders_bw.regexp
/@b\./ 554 ACL from_senders_bw
for one ISP through 10 AM, I saw this traffic received, all crap:
168 b.advizeoffers.com
135 b.DRM12.com
121 b.SpecialOffers1.com
65 b.WhileItsHot1.com
59 b.ValueFox88.com
49 b.todaysbestbets1.com
39 b.swgmail.net
32 b.FreePrize44.com
28 b.mdmnetwork.com
27 b.dtmail.net
20 b.Millenium78.com
15 b.imomentumnews.com
15 b.AdvizeMark1.com
14 b.twistmailnet.com
12 b.listoffers11.com
10 b.dailycommercenet.com
7 b.silver111.com
5 b.cupmailnet.com
4 b.RaveOnMail.com
3 b.yfoffers.com
3 b.prandsav.com
3 b.ictoae.com
2 b.Mega78.com
2 b.FGCDirectMail.com
2 b.ExpressBrands11.com
1 b.r4l0.com
1 b.Three022.com
1 b.MyBestValues1.com
1 b.MM459.com
1 b.DC14.com
If only all spammers would be so dumb to use fixed easily filtered
@sender.domain.
to see if you're receiving this junk:
awk '/qmgr.*queue active/ { print $7 }' /var/log/maillog |\
cut -d "@" -f 2 | cut -d ">" -f 1 | sort -f | uniq -ic | sort -rfn \
| egrep -i " b\."
Len
