On 02.01.25 18:20, Jarland Donnell via mailop wrote:
I'm reaching out to ask if anyone on this list has landed on an
effective strategy to block this spam coming from subdomains used on
Google Workspace. I'm certain most of you are seeing it, given the
volume I'm seeing. I'll give 2 samples just to put us on the same
page, so you know I'm talking about the same thing I assume you're
seeing:
https://mxbin.io/V6FxTN
https://mxbin.io/ZxLasU
It's obvious to me at this point that Google doesn't care about this
and has no intention of combating it. Content filters are at best
intermittently weak against them from where I sit. By the time I've
identified a new domain/subdomain it's already too late to just block
it by sender, they've already moved on to another.
I'm thinking something along the lines of blocking mail from all
subdomains that come from Google IPs, and then whitelisting any
legitimate ones. Anyone else found any good strategy that works for
them here?
I have put googlegroups.com and groups.google.com to my local rhsbl list and
use it at both MTA and spamassassin level (uribl checks included).
Works so far.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
