Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Bill Cole
On 6 Nov 2019, at 14:33, Mark London wrote: Hi - We got several hours of spam from the IP address 103.136.41.36 in India.When I did a Multi-RBL check, the ip address was in the following databases: bl.emailbasura.org That one has been dead for years, and recently started "listing" the

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Rob McEwen
fwiw - this has been blacklisted at invaluement for days. --Rob McEwen, invaluement.com On 11/6/2019 2:33 PM, Mark London wrote: Hi - We got several hours of spam from the IP address 103.136.41.36 in India.    When I did a Multi-RBL check, the ip address was in the following databases:

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Benny Pedersen
Mark London skrev den 2019-11-06 20:33: Given the amount of traffic we were receiving, I'm surprised it didn't show up sooner on the other RBLs. maybe greylist all ips that is not on dnswl at all, say greylist 4 days, near to postfix default queue life time :=) reduce need for more

Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Mark London
Hi - We got several hours of spam from the IP address 103.136.41.36 in India.When I did a Multi-RBL check, the ip address was in the following databases: bl.emailbasura.org dnsbl.sorbs.net dns.spfbl.net spam.spamrats.com truncate.gbudb.net I think sorbs.net is a paid for service. At