> -----Original Message----- > From: Menno van Bennekom [mailto:[EMAIL PROTECTED] > Sent: Friday, July 15, 2005 10:41 AM > To: users@spamassassin.apache.org > Subject: Re: this receive line only in spam > > > FYI, > I got another receive line here that occurs only in spam, > with always the > same ip-segment (not the ip-address that actually delivers the mail). > First I tagged it with SA but now I block the mail in > postfix, 15% less > spam!. > Maybe somebody recognizes these lines. It's the second > receive line, and > the envelope-sender ends at @punkass.com, @sexmagnet.com, > @thoughguy.com > etcetera. > > Regards > Menno van Bennekom > > Received: from bonbon.net (mx2.bonbon.net [38.113.3.55]) > Received: from bonbon.net (mx3.bonbon.net [38.113.3.75]) > Received: from gamebox.net (mx1.gamebox.net [38.113.3.68]) *snip*
That subnet is listed in spews. Block away! http://spews.org/html/S2888.html http://www.completewhois.com/cgi-bin/whois.cgi?query=38.113.3.57 This rings a bell for some reason: Org-Name Jerky Network Services Street-Address PO Box 552 City Newton State MA Postal-Code 02460 Added to my watch list. --Chris
