Forgive me for repeating myself on this one, but I'm a proponent of blocking outright on SBL. There's a good reason for spammers to be in their list, and it's not some community project where anyone and everyone makes nominations, so it's practically flawless.

Another trick for Green Horse is the following lines in a custom filter somewhere:

# Green Horse Corporation (SBL12495)
BODY        28    CONTAINS    /img/c.0/
BODY        28    CONTAINS    /img/o.0/
BODY        28    CONTAINS    /img/v.0/

This is just in case they break out into new address space. 28 is my delete weight plus Declude's negative weight tests (because they tend to get added in after custom filters and I use SKIPIFWEIGHT functionality).

Matt


Fritz Squib wrote:


Amazing, I knew that I saw a lot more spam coming from individual cable/dsl
modems, but I had no idea...

http://www.spamhaus.org/SBL/sbl.lasso?query=SBL12495

http://groups.google.com/groups?scoring=d&q=atriks.com+group:*abuse*

Fritz

Frederick P. Squib, Jr.
Network Operations/Mail Administrator
Citizens Telephone Company of Kecksburg
http://www.wpa.net

() ascii ribbon campaign - against html mail /\ - against microsoft attachments





---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to