Vincenzo Gianferrari Pini wrote:
And some tricky spammer, knowing this possibly misleading behaviour, has spoofed "query.bondedsender.org" using a new whitelist "query.bondedsender.org.com" that lists the IPs he uses to send spam!
In fact both blacklist entries 198.151.196.87.sbl-xbl.spamhaus.org and 198.151.196.87.dul.dnsbl.sorbs.net do resolve, so the whitelist spoof trick is effectively circumventing the blacklist check! :-(
Vincenzo --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
