Alex wrote: > I'm also receiving a ton of single-link spam > http://pastebin.com/DVEGBE3j > http://pastebin.com/Z97tBVE4 > > After training, they are hitting bayes99. The IP from one example > (98.138.120.233) still isn't listed in SBL or XBL. Shouldn't it be by > now?
No, and neither should 72.30.239.77 from the other message. Both are legitimate Yahoo! relays that handed these messages to your MX. Feel free to blacklist Yahoo! if you like... 79.120.163.57 and 223.207.210.39 possibly could be listed on a DNSBL, since those are the IPs the messages entered Yahoo! from. But most DNSBLs aren't intended for the deep header scans that would be needed for them to hit. -kgd
