"random" spam - was: Fwd: Find an eBook reader and keep the reading alive

[Mark Sapiro]

On 01/04/2017 03:56 PM, Walt Thiessen wrote:
> 
> The send domains are all different. The servers are all different. The
> IPs are all different. They end up on blacklists in due course, but by
> then they've moved on to their next "victim" server IP.
> 
> Anyone else running into this stuff? Any idea how to block it?


I use Botnet in SpamAssassin - <https://github.com/eilandert/Botnet.pm>

It can help. You have to watch closely for a bit and possibly adjust the
score, and you will still get occasional false positives, but I like it.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan