Re: Never ending spam flood www.viaXX.net?

[rich...@buzzhost.co.uk]

On Fri, 2009-07-10 at 09:11 -0700, John Hardin wrote:
> On Fri, 10 Jul 2009, Terry Carmen wrote:
> 
> > All the supplied domain names have a DNS server in China. It might be 
> > worth it to create a rule to based on the link's DNS server's location 
> > (Geo IP Lookup).
> 
> *that* might actually be a good test, and one that is safer than resolving 
> the offending hostname itself. You're not likely to get poisoned by a TLD 
> server...
> 
Which is what the Barracuda Real Time Intent engine does...... Looks up
the IP for the AUTH NS, then checks that IP against B/L.