On Mon, Jun 28, 2010 at 04:52:48AM +0000, Paul Vixie wrote: > Rich Kulawiec <[email protected]> writes: > > This spam came from the "icontact" spammers-for-hire: [snip] > > domains and/or cidrs, plz?
The spam appears to always come from icpbounce.com, so blocking that
on rDNS and/or HELO should suffice. Observed ranges are:
66.192.165.128/28
74.202.227.32/27
216.27.93.0/25
---Rsk

