[127636] in North American Network Operators' Group
Re: [Bruce Hoffman] Thank-you for your recent participation.
daemon@ATHENA.MIT.EDU (Rich Kulawiec)
Wed Jul 7 10:01:34 2010
Date: Wed, 7 Jul 2010 10:00:55 -0400
From: Rich Kulawiec <rsk@gsp.org>
To: nanog@merit.edu
In-Reply-To: <g3mxufkbbz.fsf@nsa.vix.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Mon, Jun 28, 2010 at 04:52:48AM +0000, Paul Vixie wrote:
> Rich Kulawiec <rsk@gsp.org> writes:
> > This spam came from the "icontact" spammers-for-hire: [snip]
>
> domains and/or cidrs, plz?
The spam appears to always come from icpbounce.com, so blocking that
on rDNS and/or HELO should suffice. Observed ranges are:
66.192.165.128/28
74.202.227.32/27
216.27.93.0/25
---Rsk
