Hi Chris, On 2016-07-08 Fri 11:10 AM |, Chris Bennett wrote: > I already have a script with regex's for blacklisting IP's but I am > getting several repeat spam emails to many of my email addresses, same > senders, but from Gmail especially. >
Is this spam actually coming from Google IP addresses? Just because a spammer sends with a gmail address, doesn't mean they are relaying via Gmail's servers. > I can't blacklist those since gmail has so many MX's, which would > interfere with good emails too. Gmail probably wouldn't like that > either. > > Any ideas what I should do? > Report abuse: <hostmaster@palm:~ 0>$ host 209.85.220.43 43.220.85.209.in-addr.arpa domain name pointer mail-pa0-f43.google.com. <hostmaster@palm:~ 0>$ nice whois 209.85.220.43 | fgrep -i abuse OrgAbuseHandle: ABUSE5250-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-650-253-0000 OrgAbuseEmail: [email protected] OrgAbuseRef: https://whois.arin.net/rest/poc/ABUSE5250-ARIN In this case, foward the full message with full headers to [email protected] In mutt: hit 'h', then 'f'. Thunderbird & Claws-mail are similar. The big freemail providers are pretty good at closing crap accounts. All the best, -- Craig Skinner | http://linkd.in/yGqkv7
