Milter-greylist

Hi

This is not related to milter-greylist, but perhaps you guys have some
expericence on the topic:

My domain is under a flood of spams for viagra. All the messages are 
different. The only thing they have in common is that the URL they
contain resolve to the same IP address (the domain name of the URL is
also different on each spam I saw). The IP is 211.144.68.87, FWIW.

In order to filter that, I should grab the URL from the message, 
resolve the address and blacklist if it's the infamous IP. 

That's not easy to do. Anyone knows a tool that already do that kind
of thing? 

I thought I could use a shell script hooked to a honeypot address to
collect all the domains resolving to this IP, and use milter-regex to
reject the messages containing the URL containing them, but it still
looks rather unefficient.

-- 
Emmanuel Dreyfus
manu@...