294528Re: how to stop facebook spam emails
- Jul 29, 2013On 7/29/2013 2:16 PM, motty cruz wrote:
> Thank you Mr. Wietse,Motty, note that using bl.spamcop.net for direct rejection is
> I added spamcop to my rbl since to be holding the line for now.
discouraged by the Spamcop team. The chance of FPs is pretty high with
this DNSBL. It is recommended that you use bl.spamcop.net only in a
scoring system such as SA and with a relatively low score. SA in fact
does this with spamcop in the default configuration.
Using Postscreen w/Zen and BRBL, along with client/sender/helo rhsbl
checks against dbl.spamhaus.org, should REJECT 90-95% of your inbound
spam connections including all bot spam. Then all you have to worry
about is snowshoe. For that you'll need a good content filter, and/or
much manual work building CIDR tables of revealed snowshoe networks.
There exist both public and private mailing lists that specialize in
publishing such snowshoe spammer CIDR ranges.
> On Mon, Jul 29, 2013 at 12:04 PM, Wietse Venema <wietse@...>wrote:Just a few. ;) I omitted the APEWS listing, for obvious reasons.
>> The IP address is listed at zen.spamhaus.org, bl.spamcop.net, and
>> b.barracudacentral.org, and perhaps more.
184.108.40.206 abuse.ch combined zone Listed
220.127.116.11 abuse.ch spam blacklist Listed
18.104.22.168 Barracuda Reputation Block List Listed
22.214.171.124 CBL Listed
126.96.36.199 Mailspike Blacklist Listed
188.8.131.52 McAfee RBL Listed
184.108.40.206 nsZones.com SBL Listed
220.127.116.11 nsZones.com SBL+Dyn Listed
18.104.22.168 Project Honey Pot (http:BL) Listed
22.214.171.124 SORBS Aggregate zone (problems) Listed
126.96.36.199 SORBS Spamhost (any time) Listed
188.8.131.52 SORBS Spamhost (last 28 days) Listed
184.108.40.206 SORBS Spamhost (last year) Listed
220.127.116.11 SpamCop Blocking List Listed
18.104.22.168 Spamhaus SBL-XBL Combined Block List Listed
22.214.171.124 Spamhaus XBL Exploits Block List Listed
126.96.36.199 Spamhaus ZEN Combined Block List Listed
188.8.131.52 Unsubscribe Blacklist UBL Listed
184.108.40.206 V4BL/DDNSBL Listed
220.127.116.11 Hostkarma Listed
18.104.22.168 Mailspike Reputation Listed
22.214.171.124 Quorum.to Listed
The fact that just about everyone in the DNSBL world is listing this IP,
and you accepted mail from it, would suggest that you are fairly new to
using DNSBLs, and anti-spam controls in general. It may prove valuable
to search the list archives for "DNSBL" and/or "spam".
- << Previous post in topic