Would be great if the IP-Blacklist (or another Blacklist) could handle also connecting hostnames given by the reverse lookup. There are some dynamic-ranges we never received legitimate mails from, but a lot of spam (often not in MAPS-Servers we use). It seems hostnames like *.dsl.verizon.net, *.client2.attbi.com are more firm (and easyer to add) than their subnets.

Dan, I tried it now, but it dosen´t work. It seems the From Domain BL process only the From header line, not the hostname/domain detected by reverse lookup (I remind of reading something about that here before).

Frank,

We had added the request to our wishlist, but are waiting to see how the statistical fingerprinting behaves before adding new features. The way we designed it also looks at all email headers, including source IPs. It is self-learning, so it could catch all emails missed by other methods. There may not be need for more blocklists, and are waiting until we have a stable version so we can find out.

FYI, currently the keyword filter does not look at the reverse lookup result and/or the other smtp headers (except for the subject).

Roberto
LogSat Software