On Sun, 2006-07-09 at 22:40 -0400, Dirk the Daring wrote: > I've noticed some SPAMmers recently starting to HELO using > non-routable > IP addresses (mostly 10.x.x.x or 192.168.x.x) > > I'm thinking of filtering for this, and I came up with this code > (which > would be placed AFTER the check for an IP-based HELO in square > brackets - > so any IP-based HELO missing the brackets has already been rejected).
If your seeing drive by spammers, I honestly would be looking at implementing greylisting instead. Most of my spam experience has shown that a vast majority is coming from IP addresses that do not get used that often. My $0.02 Kayne _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

