Re: Spam sent from compromised (web)hosts vs botnet spam

>>> You might want to follow one Received header, which could find webhosts
>>> using a shared outbound mail relay.
>> 
>> Good idea - thanks.
>
>You'll see very little of that from the *ix webhost spam engines.  They
>do direct-to-MX.  Relatively few webhosters actively intercept port 25
>outbound - I only know of one actually.

I can give you some IPs at Perfora and Demon that send me a great deal
of spam from other hosts on their network, with just enough non-spam
that I can't quite block them.

-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org