Re: [SAtalk] Updated DailyPromotions / HSM rules

2002-12-09 Thread Patrick Bores
I have a feeling this is one of those wack-a-mole solutions. While is sounds like lots of fun (! :) ) I feel it might be better to rely on other means for scoring this spam. Namely the DNSBLs that specifically look for spamhauses like HSM or Razor2. I just don't see any other feasible

Re: [SAtalk] Updated DailyPromotions / HSM rules

2002-12-08 Thread Justin Mason
Patrick Bores said: I have noticed that most of the NS records for these spammers are the same or similar. Would it be too expensive to do a quick lookup of NS records to block these guys? no, I don't think so -- it sounds like a very interesting technique... there's a lot of these

Re: [SAtalk] Updated DailyPromotions / HSM rules

2002-12-08 Thread listuser
On Sun, 8 Dec 2002, Justin Mason wrote: Patrick Bores said: I have noticed that most of the NS records for these spammers are the same or similar. Would it be too expensive to do a quick lookup of NS records to block these guys? no, I don't think so -- it sounds like a very

Re: [SAtalk] Updated DailyPromotions / HSM rules

2002-12-06 Thread Patrick Bores
Hello, I have noticed that most of the NS records for these spammers are the same or similar. Would it be too expensive to do a quick lookup of NS records to block these guys? Here are my results: [whiteout:~] patrick% host -t ns thelst40090hspeedm.com thelst40090hspeedm.com name server

[SAtalk] Updated DailyPromotions / HSM rules

2002-12-05 Thread Michael Moncur
I posted some rules yesterday to catch spam from HiSpeedMedia / Daily Promotions. They singlehandedly contribute about 10% of my spam, and their messages are always an image and a minimum of text. The updated set of rules below catches all of their messages, until they mutate again... If you use