Julian Mehnle wrote:
I admit I'm not entirely sure it would work reliably. Some
empirical research would be necessary.
AFAIK Spamcop uses this as a _part_ of its "mailhost" system.
And in normal processing without configured "mailhost". One
critical point are DNS hickups.
I've configured "mailhost" after sending about 40 quick spam
reports to my own ISP before seeing the problem. Fortunately
it was a pure mailin, no mailout, and I got it unlisted within
less than two hours.
what abstract problem is being solved by knowing the border
MTAs of one's mail provider?
It might help to find the relevant (if any) Received-SPF: or
to analyze the timestamp lines. The first "untrusted-from"
(top down, actually and bottom-up it's the last) should get
the abuse reports, if it's not one of your forwarders. Bye.