Spam from .us domains

[Richard Siddall]

Look at greylisting.  It may let you defer accepting email from new 
domains or new IPs until the domains show up in the RBLs.

Philip Parsons wrote:
> Yeah that's the one's not certain if someone has written a SA rule or something to catch without having to rely on the RBLS as hundreds get through before the RBLS catchup...
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Stef Morrell
> Sent: May-02-14 1:20 PM
> To: 'MailScanner discussion'
> Subject: RE: Spam from .us domains
>
> On 02 May 2014 18:49 Terry Hulen Jr wrote:
>> What MTA are you using?  I use RBLs with my MTA instead of
>> Mailscanner.  It stops the spammer from even sending any
>> data.
>
> If it's the same stuff I am seeing, then the spam is getting sent out from fresh ips and newly (same day) registered domains. It's getting delivered prior to the RBLs becoming aware of the new sources.
>
> For example, today I got spam from russianbrides-dating-great.me only 6-7 hours after the domain was registered. I won't get any tomorrow, because now it's in the RBLs and will be blocked.
>