>My earlier attempts at harvesting rejects generated by unknown users
>resulted in blocking all mail from Earthlink, MSN and AOL.

You have to harvest their outbound relays and exclude them from your 
harvesting script, or, exclude PTR-less IP's.  But don't whitelist their IPs.

 >In my sorting, I have found a few large blocks of dynamic addresses.  None
>of these sent particularly much UCE per IP, but it adds up.

My observation, too.  Some dsl/cable spammers can be extremely high volume 
and intense due to their bandwidth, but for every one of those monster 
spammers, there are many 1000's of low-volume spammers.

>You might try the below with a warn_if_reject and see what you get.
>
>200.149.152 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br

wouldn't it be better in mta_clients_bw.map:

user.veloxzone.com.br 554 mta_clients_bw_map
client.attbi.com 554 mta_clients_bw_map
client.mchsi.com 554 mta_clients_bw_map
client.insightbb.com 554 mta_clients_bw_map
ipt.aol.com 554 mta_clients_bw_map
dsl.brasiltelecom.net.br 554 mta_clients_bw_map
dsl.telesp.net.br 554 mta_clients_bw_map
dial.terra.cl 554 mta_clients_bw_map

and then in mta_clients_bw.regexp:

/pool.*verizon\.com/ 554 mta_clients_bw_regexp
/.*\-.*\-.*\-.*\.speedy\.com.\ar/ 554 mta_clients_bw_regexp
/.*\-.*\-.*\-.*\.prima.net.ar/ 554 mta_clients_bw_regexp
/host.*\.telecom\.net\.ar/ 554 mta_clients_bw_regexp
/ppp.*t\-net\.net\.ve/ 554 mta_clients_bw_regexp

this:

200.149.152 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.153 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.154 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.155 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.156 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.157 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.158 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br
200.149.159 554 RFC 1893 ERR 5.7.1 mass mailing veloxzone.com.br

... could be, in mta_clients_bw.regexp, collapsed to:

/200\.149\.15[0-9]/ 554 mta_clients_bw_regexp

Len


Reply via email to