One other thing to think about. My workstation is in my home office. My mail
server is at my NOC. I have a VPN setup between my home office and the NOC
for administration of the servers.
Any mail I send shows a remote IP of my private address, sense my mail
server received it through the VPN.
Another idea for a new test, a close cousin to the SpamDomains test:
Received: from styggen.com [24.208.153.243] by mx2.spamsoap.com
(SMTPD32-7.15) id A288E80090; Fri, 06 Jun 2003 10:42:32 -0700
This message came from a road runner IP. How about a test where we build
a list of CIDRs for a
not use the
email account that their ISP provides, but they use their ISP's outgoing mail server
because they are forced to due to port 25 filtering.
Bill
-Original Message-
From: R. Scott Perry
Sent: Sun, 08 Jun 2003 09:36:56 -0400
Subject: Re: [Declude.JunkMail] SpamIPs Test Idea
to due to port 25 filtering.
Bill
-Original Message-
From: R. Scott Perry
Sent: Sun, 08 Jun 2003 09:36:56 -0400
Subject: Re: [Declude.JunkMail] SpamIPs Test Idea
Another idea for a new test, a close cousin to the SpamDomains test:
Received: from styggen.com [24.208.153.243] by mx2
: [Declude.JunkMail] SpamIPs Test Idea
Another idea for a new test, a close cousin to the SpamDomains test:
Received: from styggen.com [24.208.153.243] by mx2.spamsoap.com
(SMTPD32-7.15) id A288E80090; Fri, 06 Jun 2003 10:42:32 -0700
This message came from a road runner IP. How about a test where
, to use a HELO string containing
either .rr.com or .rr.net. Or perhaps the other way around.
Bill
-Original Message-
From: Dan Patnode
Sent: 08 Jun 2003 12:47:11 -0700
Subject: Re: [Declude.JunkMail] SpamIPs Test Idea
Thanks for the question Bill,
Looking back at my original posting, I
Looking back at my original posting, I showed RNDS, then said all the
domains those IPs use. The intent is to ignore MAILFROM (which Spam
Domains already checks) and compare only IP with RDNS.
Scott,
Would that still be effective?
Yes, I think the test would work with comparing to HELO/EHLO
containing either .rr.com or .rr.net. Or
perhaps the other way around.
Bill
-Original Message-
From: Dan Patnode
Sent: 08 Jun 2003 12:47:11 -0700
Subject: Re: [Declude.JunkMail] SpamIPs Test Idea
Thanks for the question Bill,
Looking back at my original posting, I showed RNDS, then said
