Hi,

I am a novice / hobbyist running my own server for fun and for a couple
family members. Using Exim version 4.92.3 #0 (FreeBSD 12.0)

I love the block_hosts feature and it's always worked very well, until the
Russian spammers (coming out of ruvds.com) started doing something
different.

This is in my block_hosts file:   194.87.0.0/16

Below is a summary header of spams coming through anyway.

The Russians are doing something with Google and I keep reporting the issue
into the Google cloud platform forms abuse report black hole. Spamcop shows
that abuse reports are going to ruvds.com and of course, they will do
nothing.

My question is, why is the block_hosts not working here?

Is the *194.87.207.175* too deep into the headers for Exim to block?

Received: from mail-lf1-f47.google.com ([209.85.167.47]:37932)
Received: by mail-lf1-f47.google.com with SMTP id
X-Google-DKIM-Signature:
X-Gm-Message-State:
X-Gm-Gg:
X-Google-Smtp-Source:
Received: from mhlw.go.jp *([194.87.207.175])*
Received: from tjmaxx-209-1.bm16.maas.zetaglobal.net (
tjmaxx-209-1.bm16.maas.zetaglobal.net. [96.47.42.032])
Received: from mta6.communication.tiffany.com (
mta6.communication.tiffany.com. [128.245.486.443])
Received: by mta.cbrecommunications.com id huk1022fmd4a
Received: from nei.ouest-france.fr (nei.ouest-france.fr. [172.675.2.844])
by mx.google.com with ESMTPS id
Received: by mta11.c.coachoutlet.com id huhdgg2fmd41 for
From: Omaha Steaks Kit - [83255-NQ] <[email protected]>

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to