3 prefixes in my subscriber filter apply to comcast subscribers:
(bgp|dhcp|pcp).*comcast
total connects from:
# egrep -ic ": connect from.*(dhcp|bgp|pcp).*comcast" /postfix/log/maillog
2133
Total rejects:
[EMAIL PROTECTED] lconrad]# egrep -ic "reject.*(dhcp|bgp|pcp).*comcast"
/postfix/log/maillog
3110
Rejects for unknown user:
# egrep -i "reject.*(dhcp|bgp|pcp).*comcast" /postfix/log/maillog | egrep
-ic "recipient table"
2755
how many SHEL discos (SHEL = 2):
# egrep -i "(dhcp|bgp|pcp).*comcast" /postfix/log/maillog | egrep -ic "too
many"
1316
For msgs to known users, the FROM and HELO fields, broken down into helo a)
is comcast and b) isn't comcast:
from=<[EMAIL PROTECTED]> helo=<pcp03488257pcs.indpnd01.mo.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp441356pcs.sprngf01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp441356pcs.sprngf01.ga.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03400539pcs.mtromd01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp01768561pcs.audubn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp648586pcs.mkethn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp648586pcs.mkethn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04484898pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04484898pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03761616pcs.monroe01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01017538pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01017538pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02426257pcs.kensgt01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03884998pcs.radnor01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp652744pcs.bbridg01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp958297bgs.derbrh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp891374pcs.centrl01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp581759pcs.wilmsc01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02226827pcs.rte20201.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04674440pcs.dalect01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03435886pcs.olathe01.ks.comcast.net>
from=<[EMAIL PROTECTED]> helo=<esx128dhcp963.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp968516pcs.lwrnce01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02280056pcs.newhav01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp725644pcs.arlngt01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp136655pcs.mtlrel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp965499bgs.derbrn01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp01254913pcs.hamden01.ct.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01612798pcs.lambrv01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02021521pcs.rthfrd01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01032895bgs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01032895bgs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp186757pcs.swedsb01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp186757pcs.swedsb01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp572714bgs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp572714bgs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp403533bgs.medwln01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp429930pcs.pinhil01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02389862pcs.pinval01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261405pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03943171pcs.dalect01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01870245pcs.pwayne01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02226827pcs.rte20201.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04471397pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03324373pcs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03324373pcs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03201448pcs.palmrn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04190009pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02524767pcs.nromeo01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03113059pcs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp04497163pcs.jersyc01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03662746pcs.coatsv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03721750pcs.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01954929pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03921059pcs.arlngt01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp945618pcs.cstltn01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01768561pcs.audubn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp016206pcs.harngt01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp016206pcs.harngt01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03362050pcs.kenets01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03362050pcs.kenets01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp438682pcs.poolr01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp438682pcs.poolr01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01454263pcs.blumtn01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01454263pcs.blumtn01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02462439pcs.chrchv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02462439pcs.chrchv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp958297bgs.derbrh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp180718pcs.pnsakn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp180718pcs.pnsakn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02564022pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp949806pcs.bechgr01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04471529pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01711170pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01711170pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<bgp01139423bgs.ypwest01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<bgp01139423bgs.ypwest01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01285445pcs.hlcrs201.al.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp242710pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp242710pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02792939pcs.roylok01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02792939pcs.roylok01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01873798pcs.phnixv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01873798pcs.phnixv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04563890pcs.liztwn01.ky.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01037857pcs.mtdra01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04145523pcs.shrpsr01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04145523pcs.shrpsr01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01113114pcs.flint01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03753867pcs.walngs01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01307436pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01307436pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261065pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04222667pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04222667pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02134675pcs.gardnc01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp460046bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp460046bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01955831pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01955831pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01072841bgs.vnburn01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01384790bgs.forhls01.nm.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01016830pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp749918pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp749918pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02741896pcs.kensgt01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03340657pcs.wilmsc01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02261565pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01068963pcs.andrsn01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp654075pcs.tharpe01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01068963pcs.andrsn01.tn.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261065pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03346272pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03346272pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03933450pcs.sthind01.mo.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01602372pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03488257pcs.indpnd01.mo.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp441356pcs.sprngf01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp441356pcs.sprngf01.ga.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03400539pcs.mtromd01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp01768561pcs.audubn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp648586pcs.mkethn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp648586pcs.mkethn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04484898pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04484898pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03761616pcs.monroe01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01017538pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01017538pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp250818pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02426257pcs.kensgt01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03884998pcs.radnor01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp652744pcs.bbridg01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp958297bgs.derbrh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp891374pcs.centrl01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp581759pcs.wilmsc01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02226827pcs.rte20201.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04674440pcs.dalect01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03435886pcs.olathe01.ks.comcast.net>
from=<[EMAIL PROTECTED]> helo=<esx128dhcp963.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp968516pcs.lwrnce01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02280056pcs.newhav01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp725644pcs.arlngt01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp136655pcs.mtlrel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp965499bgs.derbrn01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp01254913pcs.hamden01.ct.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01612798pcs.lambrv01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02021521pcs.rthfrd01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01032895bgs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01032895bgs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp186757pcs.swedsb01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp186757pcs.swedsb01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp572714bgs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp572714bgs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp403533bgs.medwln01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp429930pcs.pinhil01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02389862pcs.pinval01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261405pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03943171pcs.dalect01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01870245pcs.pwayne01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02226827pcs.rte20201.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04471397pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03324373pcs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03324373pcs.sothfd01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03201448pcs.palmrn01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04190009pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02362485pcs.reding01.pa.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02524767pcs.nromeo01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03113059pcs.eatntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp04497163pcs.jersyc01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03662746pcs.coatsv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03721750pcs.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01954929pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03921059pcs.arlngt01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp945618pcs.cstltn01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01768561pcs.audubn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp016206pcs.harngt01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp016206pcs.harngt01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03362050pcs.kenets01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03362050pcs.kenets01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp438682pcs.poolr01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp438682pcs.poolr01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01454263pcs.blumtn01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01454263pcs.blumtn01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02462439pcs.chrchv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02462439pcs.chrchv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp958297bgs.derbrh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp180718pcs.pnsakn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp180718pcs.pnsakn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02564022pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp949806pcs.bechgr01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04471529pcs.brmngh01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01711170pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01711170pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<bgp01139423bgs.ypwest01.mi.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<bgp01139423bgs.ypwest01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01285445pcs.hlcrs201.al.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp242710pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp242710pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02792939pcs.roylok01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02792939pcs.roylok01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01873798pcs.phnixv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01873798pcs.phnixv01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04563890pcs.liztwn01.ky.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01037857pcs.mtdra01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04145523pcs.shrpsr01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04145523pcs.shrpsr01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01113114pcs.flint01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03753867pcs.walngs01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01307436pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01307436pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261065pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04222667pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04222667pcs.macmb101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02134675pcs.gardnc01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp460046bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp460046bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01955831pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01955831pcs.hnsvl01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01072841bgs.vnburn01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp01384790bgs.forhls01.nm.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01016830pcs.washly01.sc.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp749918pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp749918pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp456534bgs.avenel01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02741896pcs.kensgt01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03340657pcs.wilmsc01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02261565pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp150854pcs.hamntn01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01068963pcs.andrsn01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp654075pcs.tharpe01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01068963pcs.andrsn01.tn.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03534815pcs.alico01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp261065pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03346272pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03346272pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03933450pcs.sthind01.mo.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01602372pcs.manass01.va.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03872585pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01142279pcs.newhav01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04023005pcs.whtmrs01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04023005pcs.whtmrs01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp455377pcs.shklfd01.ar.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp455377pcs.shklfd01.ar.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01501471pcs.univde01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01501471pcs.univde01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01480800pcs.ncstl01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03198789pcs.flshng01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp251254pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04896278pcs.tybout01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04896278pcs.tybout01.de.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02156528pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04023005pcs.whtmrs01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04023005pcs.whtmrs01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01110331pcs.clnt3401.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01110331pcs.clnt3401.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04270476pcs.martnz01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04270476pcs.martnz01.ga.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp537717pcs.nash01.tn.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01321444pcs.toresd01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03751457pcs.walngs01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp03751457pcs.walngs01.pa.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01142279pcs.newhav01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<esx128dhcp963.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<esx128dhcp963.essex01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02476713pcs.frsrc101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02773272pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp427194bgs.union01.nj.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp486876pcs.howard01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01539914pcs.huntsv01.al.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp01539914pcs.huntsv01.al.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp04023005pcs.whtmrs01.md.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp02134675pcs.gardnc01.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02773272pcs.pimaco01.az.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp654075pcs.tharpe01.fl.comcast.net>
from=<[EMAIL PROTECTED]> helo=<comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02476713pcs.frsrc101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp945618pcs.cstltn01.in.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp02476713pcs.frsrc101.mi.comcast.net>
from=<[EMAIL PROTECTED]> helo=<pcp824596pcs.nrockv01.md.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp545607bgs.ewndsr01.nj.comcast.net>
from=<[EMAIL PROTECTED]> helo=<bgp545607bgs.ewndsr01.nj.comcast.net>
from=<[EMAIL PROTECTED]>
helo=<pcp03113059pcs.eatntn01.nj.comcast.net>
.... if the legit mailserver did/could not set the PTR hostname to his own
domain (ie, left it legit as passed out by comcast), then one would expect
the sender@ NOT to be alphabet soup. Anybody see any legit candidates above??
Next is to known users and helo NOT comcast, meaning the sender has set the
HELO hostname. One would expect the @sender.domain and the Helo domain to
match because these aren't ISP outbound gateways with lots of different
domains to send:
# egrep -i "reject.*(dhcp|bgp|pcp).*comcast" /postfix/log/maillog | egrep
-iv "recipient table" | cut -d ";" -f2 | awk '{print $1" "$4}' | egrep
-iv "helo.*comcast" | less
from=<[EMAIL PROTECTED]> helo=<haitaeck.de>
from=<[EMAIL PROTECTED]> helo=<peterartz.de>
from=<[EMAIL PROTECTED]> helo=<homestudyclub.co.kr>
from=<[EMAIL PROTECTED]> helo=<interstuhl.de>
from=<[EMAIL PROTECTED]> helo=<kaletka.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<klingenmeier-bau.de>
from=<[EMAIL PROTECTED]> helo=<wogetra.de>
from=<[EMAIL PROTECTED]> helo=<stromohneatom.ch>
from=<[EMAIL PROTECTED]> helo=<fifth-dimension.de>
from=<[EMAIL PROTECTED]> helo=<freemail.nl>
from=<[EMAIL PROTECTED]> helo=<ocv-ockensen.de>
from=<[EMAIL PROTECTED]> helo=<mendiger-basalt.de>
from=<[EMAIL PROTECTED]> helo=<optimal.de>
from=<[EMAIL PROTECTED]> helo=<proclima.de>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<musiccontact.de>
from=<[EMAIL PROTECTED]> helo=<worldonline.fr>
from=<[EMAIL PROTECTED]> helo=<frisurf.no>
from=<[EMAIL PROTECTED]> helo=<josef-scheiber.de>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<local.domain>
from=<[EMAIL PROTECTED]> helo=<signet.de>
from=<[EMAIL PROTECTED]> helo=<wolfsmark.de>
from=<[EMAIL PROTECTED]> helo=<thinkage.on.ca>
from=<[EMAIL PROTECTED]> helo=<cg-worx.de>
from=<[EMAIL PROTECTED]> helo=<drones.ndirect.co.uk>
from=<[EMAIL PROTECTED]> helo=<jgcomponentes.pt>
from=<[EMAIL PROTECTED]> helo=<juliet.stfx.ca>
from=<[EMAIL PROTECTED]> helo=<wordcup.de>
from=<[EMAIL PROTECTED]> helo=<toneman.de>
from=<[EMAIL PROTECTED]> helo=<celbio.it>
from=<[EMAIL PROTECTED]> helo=<design-hafner.de>
from=<[EMAIL PROTECTED]> helo=<b-schicht.de>
from=<[EMAIL PROTECTED]> helo=<pesa-bau.de>
from=<[EMAIL PROTECTED]> helo=<sender790>
from=<[EMAIL PROTECTED]> helo=<sender1416>
from=<[EMAIL PROTECTED]> helo=<sender1416>
from=<[EMAIL PROTECTED]> helo=<mozelt.de>
from=<[EMAIL PROTECTED]> helo=<stiber-faehnlein.de>
from=<[EMAIL PROTECTED]> helo=<www.info-niigata.or.jp>
from=<[EMAIL PROTECTED]> helo=<raab-muenster.de>
from=<[EMAIL PROTECTED]> helo=<brest.ifremer.fr>
from=<[EMAIL PROTECTED]> helo=<deuschel.de>
from=<[EMAIL PROTECTED]> helo=<216.86.209.183>
from=<[EMAIL PROTECTED]> helo=<hallam.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<pfadfinder-laudenbach.de>
from=<[EMAIL PROTECTED]> helo=<autoweb.ch>
from=<[EMAIL PROTECTED]> helo=<jagd-bayern.de>
from=<[EMAIL PROTECTED]> helo=<sheriff.martin.fl.us>
from=<[EMAIL PROTECTED]> helo=<local.domain>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<esti.haifa.ac.il>
from=<[EMAIL PROTECTED]> helo=<ep-ka.de>
from=<[EMAIL PROTECTED]> helo=<unionworld.ch>
from=<[EMAIL PROTECTED]> helo=<68.34.136.119>
from=<[EMAIL PROTECTED]> helo=<globalnet.co.uk>
from=<[EMAIL PROTECTED]> helo=<68.41.63.248>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<lk.dk>
from=<[EMAIL PROTECTED]> helo=<thmech.nottingham.ac.uk>
from=<[EMAIL PROTECTED]> helo=<catseye.mb.ca>
from=<[EMAIL PROTECTED]> helo=<jrmedien.de>
from=<[EMAIL PROTECTED]> helo=<met.fr>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<cconline.es>
from=<[EMAIL PROTECTED]> helo=<sc-anger.de>
from=<[EMAIL PROTECTED]> helo=<pb.cz>
from=<[EMAIL PROTECTED]> helo=<alienor.fr>
from=<[EMAIL PROTECTED]> helo=<lycos.com>
from=<[EMAIL PROTECTED]> helo=<slb-dresden.de>
from=<[EMAIL PROTECTED]> helo=<hackgangsta.de>
from=<[EMAIL PROTECTED]> helo=<schriftdruck.de>
from=<[EMAIL PROTECTED]> helo=<aaia.ca>
from=<[EMAIL PROTECTED]> helo=<work.kn-bremen.de>
from=<[EMAIL PROTECTED]> helo=<rds.ro>
from=<[EMAIL PROTECTED]> helo=<bogser.de>
from=<[EMAIL PROTECTED]> helo=<68.60.70.36>
from=<[EMAIL PROTECTED]> helo=<extreme-fisting.de>
from=<[EMAIL PROTECTED]> helo=<wilde13.de>
from=<[EMAIL PROTECTED]> helo=<sender943>
from=<[EMAIL PROTECTED]> helo=<net.com>
from=<[EMAIL PROTECTED]> helo=<68.32.25.187>
from=<[EMAIL PROTECTED]> helo=<get2net.dk>
from=<[EMAIL PROTECTED]> helo=<arendsnest.demon.nl>
from=<[EMAIL PROTECTED]> helo=<68.54.205.30>
from=<[EMAIL PROTECTED]> helo=<68.46.136.37>
from=<[EMAIL PROTECTED]> helo=<silver.chemie.tu-chemnitz.de>
from=<[EMAIL PROTECTED]> helo=<68.80.183.204>
from=<[EMAIL PROTECTED]> helo=<correio.cc.fc.ul.pt>
from=<[EMAIL PROTECTED]> helo=<clever-tor.de>
from=<[EMAIL PROTECTED]> helo=<xnet.it>
from=<[EMAIL PROTECTED]> helo=<atze-online.de>
from=<[EMAIL PROTECTED]> helo=<tsv-viktoria-stein.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<68.46.136.37>
from=<[EMAIL PROTECTED]> helo=<luedo-hellweg.de>
from=<[EMAIL PROTECTED]> helo=<68.86.183.103>
from=<[EMAIL PROTECTED]> helo=<68.59.34.153>
from=<[EMAIL PROTECTED]> helo=<wisecracker.de>
from=<[EMAIL PROTECTED]> helo=<ralfv.de>
from=<[EMAIL PROTECTED]> helo=<gmr.ssr.upm.es>
from=<[EMAIL PROTECTED]> helo=<kc.ecape.school.za>
from=<[EMAIL PROTECTED]> helo=<junior.ce.tut.fi>
from=<[EMAIL PROTECTED]> helo=<yabbadabbadoo.co.uk>
from=<[EMAIL PROTECTED]> helo=<casablanca.cz>
from=<[EMAIL PROTECTED]> helo=<mindset.de>
from=<[EMAIL PROTECTED]> helo=<osw.pl>
from=<[EMAIL PROTECTED]> helo=<katalogforum.no>
from=<[EMAIL PROTECTED]> helo=<meyenburg-iz.de>
from=<[EMAIL PROTECTED]> helo=<scoop.co.nz>
from=<[EMAIL PROTECTED]> helo=<ecolog-institut.de>
from=<[EMAIL PROTECTED]> helo=<rosa.esb.ucp.pt>
from=<[EMAIL PROTECTED]> helo=<kiwim.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<aisen.cl>
from=<[EMAIL PROTECTED]> helo=<cip.biologie.uni-osnabrueck.de>
from=<[EMAIL PROTECTED]> helo=<grobs.de>
from=<[EMAIL PROTECTED]> helo=<gjackson.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<schoermer.de>
from=<[EMAIL PROTECTED]> helo=<gasthof-prettenhofer.at>
from=<[EMAIL PROTECTED]> helo=<x-stream.dk>
from=<[EMAIL PROTECTED]> helo=<kenwood.nl>
from=<[EMAIL PROTECTED]> helo=<baumschule-bollwerk.de>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<68.83.121.153>
from=<[EMAIL PROTECTED]> helo=<musikzug-holweide.de>
from=<[EMAIL PROTECTED]> helo=<imasy.or.jp>
from=<[EMAIL PROTECTED]> helo=<ladaonline.ru>
from=<[EMAIL PROTECTED]> helo=<68.48.139.232>
from=<[EMAIL PROTECTED]> helo=<sjobo.nu>
from=<[EMAIL PROTECTED]> helo=<68.43.158.64>
from=<[EMAIL PROTECTED]> helo=<boddam.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<68.34.136.119>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<halo-world.de>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<68.32.190.94>
from=<[EMAIL PROTECTED]> helo=<68.62.88.32>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<becado.ch>
from=<[EMAIL PROTECTED]> helo=<e-sikorski.de>
from=<[EMAIL PROTECTED]> helo=<wsd-s.wsv.de>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<paw-music.de>
from=<[EMAIL PROTECTED]> helo=<multiserver.de>
from=<[EMAIL PROTECTED]> helo=<weltladen-edewecht.de>
from=<[EMAIL PROTECTED]> helo=<mediakonzept.de>
from=<[EMAIL PROTECTED]> helo=<gky.com.au>
from=<[EMAIL PROTECTED]> helo=<iworld.de>
from=<[EMAIL PROTECTED]> helo=<easysoftware.de>
from=<[EMAIL PROTECTED]> helo=<iworld.de>
from=<[EMAIL PROTECTED]> helo=<easysoftware.de>
from=<[EMAIL PROTECTED]> helo=<haitaeck.de>
from=<[EMAIL PROTECTED]> helo=<peterartz.de>
from=<[EMAIL PROTECTED]> helo=<homestudyclub.co.kr>
from=<[EMAIL PROTECTED]> helo=<interstuhl.de>
from=<[EMAIL PROTECTED]> helo=<kaletka.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<klingenmeier-bau.de>
from=<[EMAIL PROTECTED]> helo=<wogetra.de>
from=<[EMAIL PROTECTED]> helo=<stromohneatom.ch>
from=<[EMAIL PROTECTED]> helo=<fifth-dimension.de>
from=<[EMAIL PROTECTED]> helo=<freemail.nl>
from=<[EMAIL PROTECTED]> helo=<ocv-ockensen.de>
from=<[EMAIL PROTECTED]> helo=<mendiger-basalt.de>
from=<[EMAIL PROTECTED]> helo=<optimal.de>
from=<[EMAIL PROTECTED]> helo=<proclima.de>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<musiccontact.de>
from=<[EMAIL PROTECTED]> helo=<worldonline.fr>
from=<[EMAIL PROTECTED]> helo=<frisurf.no>
from=<[EMAIL PROTECTED]> helo=<josef-scheiber.de>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<local.domain>
from=<[EMAIL PROTECTED]> helo=<signet.de>
from=<[EMAIL PROTECTED]> helo=<wolfsmark.de>
from=<[EMAIL PROTECTED]> helo=<thinkage.on.ca>
from=<[EMAIL PROTECTED]> helo=<cg-worx.de>
from=<[EMAIL PROTECTED]> helo=<drones.ndirect.co.uk>
from=<[EMAIL PROTECTED]> helo=<jgcomponentes.pt>
from=<[EMAIL PROTECTED]> helo=<juliet.stfx.ca>
from=<[EMAIL PROTECTED]> helo=<wordcup.de>
from=<[EMAIL PROTECTED]> helo=<toneman.de>
from=<[EMAIL PROTECTED]> helo=<celbio.it>
from=<[EMAIL PROTECTED]> helo=<design-hafner.de>
from=<[EMAIL PROTECTED]> helo=<b-schicht.de>
from=<[EMAIL PROTECTED]> helo=<pesa-bau.de>
from=<[EMAIL PROTECTED]> helo=<sender790>
from=<[EMAIL PROTECTED]> helo=<sender1416>
from=<[EMAIL PROTECTED]> helo=<sender1416>
from=<[EMAIL PROTECTED]> helo=<mozelt.de>
from=<[EMAIL PROTECTED]> helo=<stiber-faehnlein.de>
from=<[EMAIL PROTECTED]> helo=<www.info-niigata.or.jp>
from=<[EMAIL PROTECTED]> helo=<raab-muenster.de>
from=<[EMAIL PROTECTED]> helo=<brest.ifremer.fr>
from=<[EMAIL PROTECTED]> helo=<deuschel.de>
from=<[EMAIL PROTECTED]> helo=<216.86.209.183>
from=<[EMAIL PROTECTED]> helo=<hallam.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<pfadfinder-laudenbach.de>
from=<[EMAIL PROTECTED]> helo=<autoweb.ch>
from=<[EMAIL PROTECTED]> helo=<jagd-bayern.de>
from=<[EMAIL PROTECTED]> helo=<sheriff.martin.fl.us>
from=<[EMAIL PROTECTED]> helo=<local.domain>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<esti.haifa.ac.il>
from=<[EMAIL PROTECTED]> helo=<ep-ka.de>
from=<[EMAIL PROTECTED]> helo=<unionworld.ch>
from=<[EMAIL PROTECTED]> helo=<68.34.136.119>
from=<[EMAIL PROTECTED]> helo=<globalnet.co.uk>
from=<[EMAIL PROTECTED]> helo=<68.41.63.248>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<lk.dk>
from=<[EMAIL PROTECTED]> helo=<thmech.nottingham.ac.uk>
from=<[EMAIL PROTECTED]> helo=<catseye.mb.ca>
from=<[EMAIL PROTECTED]> helo=<jrmedien.de>
from=<[EMAIL PROTECTED]> helo=<met.fr>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<pldi.net>
from=<[EMAIL PROTECTED]> helo=<cconline.es>
from=<[EMAIL PROTECTED]> helo=<sc-anger.de>
from=<[EMAIL PROTECTED]> helo=<pb.cz>
from=<[EMAIL PROTECTED]> helo=<alienor.fr>
from=<[EMAIL PROTECTED]> helo=<lycos.com>
from=<[EMAIL PROTECTED]> helo=<slb-dresden.de>
from=<[EMAIL PROTECTED]> helo=<hackgangsta.de>
from=<[EMAIL PROTECTED]> helo=<schriftdruck.de>
from=<[EMAIL PROTECTED]> helo=<aaia.ca>
from=<[EMAIL PROTECTED]> helo=<work.kn-bremen.de>
from=<[EMAIL PROTECTED]> helo=<rds.ro>
from=<[EMAIL PROTECTED]> helo=<bogser.de>
from=<[EMAIL PROTECTED]> helo=<68.60.70.36>
from=<[EMAIL PROTECTED]> helo=<extreme-fisting.de>
from=<[EMAIL PROTECTED]> helo=<wilde13.de>
from=<[EMAIL PROTECTED]> helo=<sender943>
from=<[EMAIL PROTECTED]> helo=<net.com>
from=<[EMAIL PROTECTED]> helo=<68.32.25.187>
from=<[EMAIL PROTECTED]> helo=<get2net.dk>
from=<[EMAIL PROTECTED]> helo=<arendsnest.demon.nl>
from=<[EMAIL PROTECTED]> helo=<68.54.205.30>
from=<[EMAIL PROTECTED]> helo=<68.46.136.37>
from=<[EMAIL PROTECTED]> helo=<silver.chemie.tu-chemnitz.de>
from=<[EMAIL PROTECTED]> helo=<68.80.183.204>
from=<[EMAIL PROTECTED]> helo=<correio.cc.fc.ul.pt>
from=<[EMAIL PROTECTED]> helo=<clever-tor.de>
from=<[EMAIL PROTECTED]> helo=<xnet.it>
from=<[EMAIL PROTECTED]> helo=<atze-online.de>
from=<[EMAIL PROTECTED]> helo=<tsv-viktoria-stein.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<68.46.136.37>
from=<[EMAIL PROTECTED]> helo=<luedo-hellweg.de>
from=<[EMAIL PROTECTED]> helo=<68.86.183.103>
from=<[EMAIL PROTECTED]> helo=<68.59.34.153>
from=<[EMAIL PROTECTED]> helo=<wisecracker.de>
from=<[EMAIL PROTECTED]> helo=<ralfv.de>
from=<[EMAIL PROTECTED]> helo=<gmr.ssr.upm.es>
from=<[EMAIL PROTECTED]> helo=<kc.ecape.school.za>
from=<[EMAIL PROTECTED]> helo=<junior.ce.tut.fi>
from=<[EMAIL PROTECTED]> helo=<yabbadabbadoo.co.uk>
from=<[EMAIL PROTECTED]> helo=<casablanca.cz>
from=<[EMAIL PROTECTED]> helo=<mindset.de>
from=<[EMAIL PROTECTED]> helo=<osw.pl>
from=<[EMAIL PROTECTED]> helo=<katalogforum.no>
from=<[EMAIL PROTECTED]> helo=<meyenburg-iz.de>
from=<[EMAIL PROTECTED]> helo=<scoop.co.nz>
from=<[EMAIL PROTECTED]> helo=<ecolog-institut.de>
from=<[EMAIL PROTECTED]> helo=<rosa.esb.ucp.pt>
from=<[EMAIL PROTECTED]> helo=<kiwim.de>
from=<[EMAIL PROTECTED]> helo=<compuserve.com>
from=<[EMAIL PROTECTED]> helo=<aisen.cl>
from=<[EMAIL PROTECTED]> helo=<cip.biologie.uni-osnabrueck.de>
from=<[EMAIL PROTECTED]> helo=<grobs.de>
from=<[EMAIL PROTECTED]> helo=<gjackson.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<schoermer.de>
from=<[EMAIL PROTECTED]> helo=<gasthof-prettenhofer.at>
from=<[EMAIL PROTECTED]> helo=<x-stream.dk>
from=<[EMAIL PROTECTED]> helo=<kenwood.nl>
from=<[EMAIL PROTECTED]> helo=<baumschule-bollwerk.de>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<68.83.121.153>
from=<[EMAIL PROTECTED]> helo=<musikzug-holweide.de>
from=<[EMAIL PROTECTED]> helo=<imasy.or.jp>
from=<[EMAIL PROTECTED]> helo=<ladaonline.ru>
from=<[EMAIL PROTECTED]> helo=<68.48.139.232>
from=<[EMAIL PROTECTED]> helo=<sjobo.nu>
from=<[EMAIL PROTECTED]> helo=<68.43.158.64>
from=<[EMAIL PROTECTED]> helo=<boddam.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<68.34.136.119>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<halo-world.de>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<68.32.190.94>
from=<[EMAIL PROTECTED]> helo=<68.62.88.32>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<becado.ch>
from=<[EMAIL PROTECTED]> helo=<e-sikorski.de>
from=<[EMAIL PROTECTED]> helo=<wsd-s.wsv.de>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<paw-music.de>
from=<[EMAIL PROTECTED]> helo=<multiserver.de>
from=<[EMAIL PROTECTED]> helo=<weltladen-edewecht.de>
from=<[EMAIL PROTECTED]> helo=<mediakonzept.de>
from=<[EMAIL PROTECTED]> helo=<gky.com.au>
from=<[EMAIL PROTECTED]> helo=<iworld.de>
from=<[EMAIL PROTECTED]> helo=<easysoftware.de>
from=<[EMAIL PROTECTED]> helo=<68.32.1.213>
from=<[EMAIL PROTECTED]> helo=<sia.ucl.ac.be>
from=<[EMAIL PROTECTED]> helo=<dierssen.de>
from=<[EMAIL PROTECTED]> helo=<sslweb.de>
from=<[EMAIL PROTECTED]> helo=<hotel-lennepark.de>
from=<[EMAIL PROTECTED]> helo=<68.32.190.94>
from=<[EMAIL PROTECTED]> helo=<ostermalm.stockholm.se>
from=<[EMAIL PROTECTED]> helo=<duke.in-berlin.de>
from=<[EMAIL PROTECTED]> helo=<kleberg.de>
from=<[EMAIL PROTECTED]> helo=<onkel-heinz.de>
from=<[EMAIL PROTECTED]> helo=<kroegis-minipage.de>
from=<[EMAIL PROTECTED]> helo=<jonik.dk>
from=<[EMAIL PROTECTED]> helo=<ccins.camosun.bc.ca>
from=<[EMAIL PROTECTED]> helo=<wollenwebers.de>
from=<[EMAIL PROTECTED]> helo=<sm6.sprintrpg.ems.vsnl.net.in>
from=<[EMAIL PROTECTED]> helo=<meko.vub.ac.be>
from=<[EMAIL PROTECTED]> helo=<rdemmer.de>
from=<[EMAIL PROTECTED]> helo=<ara.bc.ca>
from=<[EMAIL PROTECTED]> helo=<carver.it>
from=<[EMAIL PROTECTED]> helo=<hartes.de>
from=<[EMAIL PROTECTED]> helo=<colourscreen.de>
from=<[EMAIL PROTECTED]> helo=<santiveri.es>
from=<[EMAIL PROTECTED]> helo=<taxiworld.de>
from=<[EMAIL PROTECTED]> helo=<pitbull98.de>
from=<[EMAIL PROTECTED]> helo=<68.54.29.157>
from=<[EMAIL PROTECTED]> helo=<ircha.pl>
from=<[EMAIL PROTECTED]> helo=<binary.co.nz>
from=<[EMAIL PROTECTED]> helo=<alienor.fr>
from=<[EMAIL PROTECTED]> helo=<homisspieleseite.de>
from=<[EMAIL PROTECTED]> helo=<imoc.sinn.ru>
from=<[EMAIL PROTECTED]> helo=<lw.rau.ac.za>
from=<[EMAIL PROTECTED]> helo=<postpetclub.nu>
from=<[EMAIL PROTECTED]> helo=<erewhon.de>
from=<[EMAIL PROTECTED]> helo=<delarge.co.uk>
from=<[EMAIL PROTECTED]> helo=<n-hatton.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<cebaco.de>
from=<[EMAIL PROTECTED]> helo=<uht.ch>
from=<[EMAIL PROTECTED]> helo=<bahn-seiten.de>
from=<[EMAIL PROTECTED]> helo=<cyberdog.co.uk>
from=<[EMAIL PROTECTED]> helo=<geckoxl.de>
from=<[EMAIL PROTECTED]> helo=<yahoo.com>
from=<[EMAIL PROTECTED]> helo=<bktag.se>
from=<[EMAIL PROTECTED]> helo=<cyberpix.demon.co.uk>
from=<[EMAIL PROTECTED]> helo=<qm-data.de>
from=<[EMAIL PROTECTED]> helo=<hoetschl.de>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
from=<[EMAIL PROTECTED]> helo=<64.250.192.82>
Mail to known users (which is what a legit mail server would be doing)
rejected by the subscriber filter is really total crap.
subscribers from hsia.telus and (bgp|dhcp|pcp).comcast are spammers. I
think it's not risky to extrapolate that to ALL subscriber networks.
Now, what are the numbers of the RFCs that apply?? :))
Len