Stopping sneaky spammers

[Dustin Baer]

Bruno wrote:
>
> Hello all,
>
> I have found a major spamming outfit (HighSpeedMail) that is very aggressive
> at avoiding being detected by anti-spam software
> ...
> 4) I am using /etc/mail/access to block the delivery class C subnets for
> this spam, but have to keep adding new ones.

My server also receives a lot of mail from them.  Have you looked at the
from= line in your syslog?  They seem to be pretty consistent with
"from=<offers...>"  Have you added the following to your access.db?

        offers@         REJECT

Might help.

Dustin

--
Dustin Baer
Unix Administrator/Postmaster
Information Handling Services
15 Inverness Way East
Englewood, CO 80112
303-397-2836