Hi all, in my mail queue I sometimes find a series of DMARC reports which cannot be delivered to the spammer who caused them:
43EC952E6A 2035 Fri Oct 2 00:37:58 [email protected] (connect to ecijoven.com[31.220.44.130]:25: Connection refused) [email protected] 47A1947827 2017 Fri Oct 2 04:04:28 [email protected] (connect to ppobbris.com[31.220.44.130]:25: Connection refused) [email protected] 1D8F1468DB 2041 Fri Oct 2 03:04:02 [email protected] (connect to iberagree.com[31.220.44.130]:25: Connection refused) [email protected] 2CCDE46166 2045 Fri Oct 2 02:18:49 [email protected] (connect to shchinoff.com[31.220.44.130]:25: Connection refused) [email protected] 3F7DC454B1 2007 Fri Oct 2 01:53:39 [email protected] (connect to ecomtyoon.com[31.220.44.130]:25: Connection refused) [email protected] 3DCFE52E87 2013 Fri Oct 2 13:34:57 [email protected] (connect to iphstore.com[31.220.44.130]:25: Connection refused) [email protected] <mailto:[email protected]> I realize, that while the domain names are random, the destination IP for these is the same for each message. That brings me to the question: would something like "noDMARCReportIP" be useful, so that the list for noDMARCReportDomain does not grow too long? (I admit in my case that list has less than 100 entries.) Best regards & thank you for your good work Dirk
_______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
