Mouton,
The "upstream" is your very own hosting provider, EV1 Servers.
All you have to do is say, "Hey, EV1, please yank this Spammer's Server, webhosting.info, IP: 67.15.35.7, he is causing an entire EV1 Class C to be listed on Sorbs. See
http://www.dnsbl.us.sorbs.net/cgi-bi...=66.98.228.48."
EV1 does not like having their IP's black listed and they generally act really fast to get the IP's unlisted (including 86'ing the Spammer).
Er, umm, you guys are using SpamAssassin to filter your own
outgoing Mail, so how do you know all of your E-Mails are making it past your own Spam Filters? At least I don't filter my Outgoing!
Kenny