> -----Original Message----- > From: Oliver Schulze L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 17, 2006 2:24 PM > To: users@spamassassin.apache.org > Subject: Dealing with spam bots and dialup/dsl spammers > > > HI, > I'm getting a very high Spam volume lately. > I noticed that the most common source of spam are dial-up and > A/DSL users. > > I wonder if there is a test that I can raise the score, when > an IP/hostname send me and email and that IP/hostname is not > a MX server for that domain.
Rfc's don't require the sending MTA to also receive (be the MX) so your logic is flawed somewhat. Maybe you can blacklist using some of the dynamic rbls' that list dialup,dynamic ips' (or in earlier post, look, but some of these have static dsl clients who do have legit mail servers on them.\ Try adding some SARE's rules, enable dcc and/or razor, local baysian and see if after a while its not better. header MY_DSL Received =~ /\.atlantabroadband\.com|customer|ppp|poole?s?|modem|cable|node|adsl|dia l|dsl|client|(insight|tampabay|maine|nyc|nc|cinci)\.rr\.com|vc\.shawcabl e\.net|se\.client..?\.attbi\.com|\.(east|west)\.verizon\.net|(nj|sc)\.co mcast\.net|\.dis.net|\.charter.com|metropolis\-inter\.com/i describe MY_DSL Contains likely dsl address in header score MY_DSL 3.0
