I'd like to second this question. We are facing a lot of spam from an organisation that seems to switch servers on a daily basis (hence no way to use an IP range of other details to block them) yet they always use a *.xyz hostname for some reason. I agree it is generally a parameter that is easy to ...