Everything has been good for the last 6 months. Now there is a new spam attack.
What they are doing is registering a new domain on namecheap.com, then they send a wave of spam for a few minutes until Spamhaus flags them.
Then they register a new domain and continue. This has been going on for a week now. All the spams are getting through Sophos. As soon as an RBL blocks them they already have a new throw-away domain and are back at it.
All the emails have tld.us return address. I would like to just block all .us, but have not found a way.
Since Namecheap is under Cloudflare.com, the IP addresses are all over the place.
What to do?
This thread was automatically locked due to age.
