[At-Large] Fwd: [technical-issues] Banning .xyz email from my company's servers

Michele Neylon - Blacknight michele at blacknight.com
Sat Mar 19 20:39:03 UTC 2016


If you’re using Postfix I’d recommend setting up Postgrey
(see my rather old howto here: http://www.michele.me/blog/archives/2005/10/postgrey-greylisting-in-postfix-on-ubuntu-debian/ )

Spam Assassin by itself will only score mails.
For outright rejection you can plugin a few DNSBLs directly into Postfix and watch a lot of junk simply vanish completely ..


Mr Michele Neylon
Blacknight Solutions
Hosting, Colocation & Domains
Intl. +353 (0) 59  9183072
Direct Dial: +353 (0)59 9183090
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
Road,Graiguecullen,Carlow,Ireland  Company No.: 370845

On 17/03/2016, 04:31, "at-large-bounces at atlarge-lists.icann.org on behalf of Olivier MJ Crepin-Leblond" <at-large-bounces at atlarge-lists.icann.org on behalf of ocl at gih.com> wrote:

>Dear Barry,
>thanks for your follow-up on this. That's a good idea too. I've checked
>the past messages in the queue and spamassassin scores range from 3.4 to
>4.9 (with a trigger score required of 5.2). However, can you get a
>rejection message sent to the originator of the message? When blocking
>at Postfix level, the message is not accepted in the system & a bounce
>is issued. A genuine email originator would get a bounce explaining the
>bounce and try another method to get in contact. With spamassassin the
>message would just get dropped, wouldn't it? (apologies, my spamassassin
>coding is a bit crusty)
>Kindest regards,
>On 17/03/2016 05:32, bzs at theworld.com wrote:
>> [is this OT, how did this start?]
>> I use spamassassin system-wide to increase the spam score of a message
>> from certain TLDs to near the threshold where it's just rejected.
>> So for example in local.cf I add a rule like:
>> header DOTTOP_RULE              From =~ /.*\.top/i
>> describe DOTTOP_RULE            BZS 20160226
>> score DOTTOP_RULE               2.5
>> which means just having a .TOP TLD in the From gives it a base score
>> of 2.5, so it wouldn't take much more, tripping some other
>> spamassassin rules, to just get it blocked entirely.
>> But it means in theory a very non-spammy msg from that TLD might still
>> get through.
>Olivier MJ Crépin-Leblond, PhD
>At-Large mailing list
>At-Large at atlarge-lists.icann.org
>At-Large Official Site: http://atlarge.icann.org

More information about the At-Large mailing list