Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-08 Thread RW
On Fri, 8 Nov 2019 09:32:21 +0100 Matus UHLAR - fantomas wrote: > >> On 06.11.19 14:33, Mark London wrote: > >> >I was able to successfully add rules for spamrats and gbudb. > >> >Does anyone have experience with those? > > >On Thu, 7 Nov 2019 19:22:09 +0100 Matus UHLAR - fantomas wrote: >

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-08 Thread Matus UHLAR - fantomas
On 06.11.19 14:33, Mark London wrote: >I was able to successfully add rules for spamrats and gbudb. Does >anyone have experience with those? On Thu, 7 Nov 2019 19:22:09 +0100 Matus UHLAR - fantomas wrote: bad experience iirc.

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-07 Thread RW
On Thu, 7 Nov 2019 19:22:09 +0100 Matus UHLAR - fantomas wrote: > On 06.11.19 14:33, Mark London wrote: > >I was able to successfully add rules for spamrats and gbudb. Does > >anyone have experience with those? > > bad experience iirc. > >

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-07 Thread John Hardin
On Wed, 6 Nov 2019, Mark London wrote: Hi - We got several hours of spam from the IP address 103.136.41.36 in India. Tarpit 'em. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-07 Thread Matus UHLAR - fantomas
On 06.11.19 14:33, Mark London wrote: I was able to successfully add rules for spamrats and gbudb. Does anyone have experience with those? bad experience iirc. https://mail-archives.apache.org/mod_mbox/spamassassin-users/200904.mbox/<20090408151911.GA21449%40fantomas.sk> -- Matus UHLAR -

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Bill Cole
On 6 Nov 2019, at 14:33, Mark London wrote: Hi - We got several hours of spam from the IP address 103.136.41.36 in India.When I did a Multi-RBL check, the ip address was in the following databases: bl.emailbasura.org That one has been dead for years, and recently started "listing" the

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Rob McEwen
fwiw - this has been blacklisted at invaluement for days. --Rob McEwen, invaluement.com On 11/6/2019 2:33 PM, Mark London wrote: Hi - We got several hours of spam from the IP address 103.136.41.36 in India.    When I did a Multi-RBL check, the ip address was in the following databases:

Re: Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Benny Pedersen
Mark London skrev den 2019-11-06 20:33: Given the amount of traffic we were receiving, I'm surprised it didn't show up sooner on the other RBLs. maybe greylist all ips that is not on dnswl at all, say greylist 4 days, near to postfix default queue life time :=) reduce need for more

Bombard by spam source in India that wasn't in any RBL used by spamassassin.

2019-11-06 Thread Mark London
Hi - We got several hours of spam from the IP address 103.136.41.36 in India.When I did a Multi-RBL check, the ip address was in the following databases: bl.emailbasura.org dnsbl.sorbs.net dns.spfbl.net spam.spamrats.com truncate.gbudb.net I think sorbs.net is a paid for service. At