russian spam tsunami?

[Alex Broens]

On 3/17/2009 4:55 PM, Jeff A. Earickson wrote:
> Gang,
> 
> Has anybody else been getting buried by Cyrillic spam?  We have
> been clobbered by it.  A big boatload comes from ttnet.net.tr,
> aka Turktelekom -- I blocked every IP netblock of theirs that I
> could find this weekend.  But it comes from lots of other places
> too.  Suggestions, eg SA rules?

reject with zen at smtp level ?
reject generic rdns patterns at smtp level ?
reject generic rdns HELO patterns at smtp level ?

that should get rid of a LOT