On Thu, Apr 30, 2015 at 08:03:42AM +0900, [email protected] wrote:
> On Apr/27.15:52:21, Viktor Dukhovni wrote:
> > On Mon, Apr 27, 2015 at 03:12:04PM +0000, Peter Berghold wrote:
> > > Apr 27 10:58:50 chicweb0 postfix/smtpd[13505]: 7DC243FC1CC: client=
> > > oldmule.templefindwindow.com[23.89.2.18]
>
> > When was this address added to any of the RBLs you're using?
>
> templefindwindow.com
>
> 2015.04.27 3pm (UTC I think.)
>
> Which probably means it was listed just after they got
> through to you. This is probably what you are seeing.
>
> P
>
> This happens to match when it was created too:
>
> Domain Name: TEMPLEFINDWINDOW.COM
> Registrar: ENOM, INC.
> Sponsoring Registrar IANA ID: 48
> Whois Server: whois.enom.com
> Updated Date: 27-apr-2015
ENOM and its resellers are responsible for the vast majority of
the spam seen at my mailserver from "freshly minted" domains that
spam on the first day they are created, and are mostly not used
again after that.
--
Viktor.
