Spam from .us domains

Philip Parsons pparsons at
Fri May 2 22:47:37 IST 2014

Yeah that's the one's not certain if someone has written a SA rule or something to catch without having to rely on the RBLS as hundreds get through before the RBLS catchup...

-----Original Message-----
From: mailscanner-bounces at [mailto:mailscanner-bounces at] On Behalf Of Stef Morrell
Sent: May-02-14 1:20 PM
To: 'MailScanner discussion'
Subject: RE: Spam from .us domains

On 02 May 2014 18:49 Terry Hulen Jr wrote:
> What MTA are you using?  I use RBLs with my MTA instead of 
> Mailscanner.  It stops the spammer from even sending any 
> data.  

If it's the same stuff I am seeing, then the spam is getting sent out from fresh ips and newly (same day) registered domains. It's getting delivered prior to the RBLs becoming aware of the new sources.

For example, today I got spam from only 6-7 hours after the domain was registered. I won't get any tomorrow, because now it's in the RBLs and will be blocked.
MailScanner mailing list
mailscanner at

Before posting, read

Support MailScanner development - buy the book off the website! 

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the MailScanner mailing list