Am 27.05.2014 21:19, schrieb James B. Byrne: > Without going into a lot of detail and without naming names I wish to know if, > at the time of connection to Postfix, there exists any feasible means of > determining the registrar used by the connecting domain? As well, I would > like to know is there any practical means of determining at the time of smtp > connection by direct enquiry of a registrar when the connecting domain was > registered and block all connections from all non-whitelisted domains > registered within the past N days? > > I am aware of the 'Day Old Bread' RBL / Greylist is used by SpamAssassin but > after some investigation I have come to the belief that a registrar is in fact > behind the latest spam attack we have encountered. Our experience is that by > the time DOB is updated the domain is no longer generating mail at all. Given > the remote possibility that any domain registered with that registrar would > ever have a legitimate reason to contact us I wish to simply deny access to > our servers from any domain registered with them. Given the equal > implausibility of a newly registered domain having any legitimate need I wish > also to block these. > > Does anyone know of any milter projects usable by Postfix that address either > of these desires? > >
perhaps this helps http://rss.uribl.com/nic/ Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
