Code Crafters

Hi all,
Maybe I'm doing this wrong, but I discovered that most of the spam coming in is from the following domains:
*.top, *.win, *.download, *.xyz, and *.click
In an effort to block these TLDs, I put them in the Black List

Reverse Lookup=*.xyz
Reverse Lookup=*.top
Reverse Lookup=*.download
Reverse Lookup=*.click
Reverse Lookup=*.win

Unfortunately, this has no effect - the spams (over 150/day/account) are getting completely out of control
- the Real-time Black Lists are not blocking these junk TLDs - SpamHaus, Spamcop, etc are passing them through.
- The Bayesian filter can only do so much, but these spammers simply change their HTML enough to get through (I have 150 emails for the same thing in 150 different formats!).
- Block IP addresses is completely useless as these domains resolve to different IPs every day! (why I MUST use a REVERSE lookup!)

Am I just configuring this wrong?

TIA!

You should use the SPAM black list option SMTP Sender Matches *.top instead of reverse lookup as it's unlikely that SPAMers will set up their reverse lookup properly to reflect a real domain as these are often just made up email addresses.

We've also been asked to add a new option to the SPAM black list for host name since some local host names like as ylmf-pc are being used consistently for SPAM attacks. These cannot be resolved to an internet IP address so this new option would really help stop those.

We've now added the new SPAM Black List, White List, Grey List Safe List and SPF Safe List option for "Host / Domain Matches (*s Allowed)" in Ability Mail Server 4.1.2.