Dave,
I checked those domains and they are now all listed in SURBL. I am also
seeing them picked up now as well on my system.
2005-11-02 05:52:00.421 2005-11-02 05:52:00.500
x:\IMail\spool\proc\work\D9a47e5b202722cef.smd laqui
om 127.0.0.20 URI from message body found in multi.surbl.org [20] [Total
Weight=5]
One thing you can do is go to www.senderbase.org and get the ip addresses of
the providers that host that -
http://www.senderbase.org/search?searchBy=organization&searchString=Integrat
ed%20Comm%20Concepts
and create filters that will block mail from those ip blocks.
Darrell
------------------------------------
http://www.invariantsystems.com
Dave Beckstrom writes:
We're receiving spam where the Ad graphic states its QuoteAMinute.com but
the domain referenced in the link is one of the following:
lainsnow.com
laquickquotes.com
lahealthinstogo.com
lahotquotes.com
lahealthsite.com
The mail is failing sniffer but apparently not failing invURIBL. Its
scoring high enough to be tagged as spam but not high enough to be blocked
from delivery.
I have a few questions:
Is there a way to block all email where the domain resolves back to a
certain DNS server? The host DNS server is NS1.LAHOSTINABOX.COM
Is there a way to do a whois and find out all of the domain names registered
to these jerks so that I can block all of the domains ahead of time?
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
