It seems like for the vast majority of spam that gets through my system with a url in it, the name server is one of name-services.com. Is there any way to create a rule that check a url's name server against a static list? Like uridnsbl without the bl?