2018-04-10 18:52 GMT-03:00 David Jones <djo...@ena.com>: > On 04/10/2018 04:47 PM, Leandro wrote: > >> 2018-04-10 17:49 GMT-03:00 Motty Cruz <motty.c...@gmail.com <mailto: >> motty.c...@gmail.com>>: >> >> I apologize here is the email headers and body >> >> https://pastebin.com/bgXrfKaQ >> >> >> >> You should not take this domain mrface.com <http://mrface.com> seriously >> because it is a TLD used for free dynamic IP service (changeip.com < >> http://changeip.com>). >> >> There is even a fake Windows Update domain in this TLD: >> >> ubuntu@matrix:~$ dig +short A windowsupdate.mrface.com < >> http://windowsupdate.mrface.com> >> 185.133.40.63 >> >> >> >> >> Thanks, >> >> >> > I noticed it was listed on the DBL dnsbl.spfbl.net and was just working > to add that to my local rules. Anyone know how to set this DBL up in SA? > I am trying to find an example in the stock SA rules now... >
Yes. We list any IP using any free dynamic TLD. A legit mail server never uses crap, or shouldn't use. Documentation to set this DNSBL at SA: https://spfbl.net/en/dnsbl/ > > -- > David Jones >
