Blocking attachments, maybe subject line statement?

[Chris Harris]

According to the server logs the envelope addresses are different everytime.
I have 3 that I have found and they are all different. But everytime I have
ran that IP address through Spamhaus, it has came back as listed.

Which brings me to another question. Should I do my spamhaus checks through
sendmail or mailscanner?
----- Original Message -----
From: "Peter Bonivart" <peter at UCGBOOK.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Friday, January 23, 2004 1:41 PM
Subject: Re: Blocking attachments, maybe subject line statement?


> Chris Harris wrote:
> > They are coming to my customers. The from address is different
everytime. I
> > have 3 diffent domain names and two of them are getting them. the only
>
> With "from address", do you mean what you see in the client (headers) or
> what you see in the server log (envelope)? The From headers are usually
> random but not so with the envelope address. Can they really spam you
> from so many addresses?
>
> Check the logs for what address to blacklist if you haven't tried that
> already.
>
> --
> /Peter Bonivart
>
> --Unix lovers do it in the Sun
>
> Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14,
> SpamAssassin 2.61 + DCC 1.2.21, ClamAV 0.65 + GMP
>