> Would you know any good DBSBLs? Be _very_ careful with some of these. I know one imparticular, Osirus Relays (relays.osirusoft.com) makes it just about impossible to get off their list once you're on meaning you risk blackholing legitimate traffic. To get off this list, they require you email their scripts from the server that is blackholed...and their mail server naturally rejects the message since you're on their list which needless to say, is [CENSORED] [CENSORED] [CENSORED] stupid or [CENSORED] [CENSORED] [CENSORED] intentional.
A good alternative might be content filtering (which will also fliter based on the IP information captured from the Received headers). The DSPAM project has been very successful at filtering spams, falsified emails, and worm emails (such as SoBig.F). The URL is http://www.nuclearelephant.com/projects/dspam/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html