John R Pierce wrote: > On 9/16/2013 1:29 PM, m.roth@xxxxxxxxx wrote: >> No. Block domains. > how? 90%+ of spam has forged FROM addresses. >From crap in my trash from today: Received: from [206.214.95.82] (port=57577 helo=03e6231b.buhlgymgagate.us) by host290.hostmonster.com with esmtp (Exim 4.80) (envelope-from <KohlsGiftCardSurvey@xxxxxxxxxxxxxxxx>) id 1VLfOH-0003sR-20 for m.roth@xxxxxxxxx; Mon, 16 Sep 2013 14:27:25 -0600 Received: by 03e6231b.bw31almxu.buhlgymgagate.us (amavisd-new, port 10268) with ESMTP id 03NGCCNSDRE623JKCXHVTJ1B; for <m.roth@xxxxxxxxx>; Mon, 16 Sep 2013 13:27:24 -0700 To: m.roth@xxxxxxxxx List-Unsubscribe: <mailto:unsub-2268-733-2332-11-65411647@xxxxxxxxxxxxxxxx?subject=unsubscribe>, <http://www.buhlgymgagate.us/unsubscribe/2268/733/2332/11/65411647/~~m.roth@xxxxxxxxx> X-Priority: 3 (Normal) From: "Kohls Gift Card Survey" <KohlsGiftCardSurvey@xxxxxxxxxxxxxxxx> So, it looks like mmm, (check whois) Jeff Martinez should be blocked at buhlgymgagate.us. On the other hand, I look at the headers to one of my posts, and I see that it's coming from, ta-da, 5-cent.us. If I were sending out spam, then you'd be perfectly justified in blocking 5-cent.us. mark _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos