On Tue, Mar 29, 2016, at 09:54 AM, /dev/rob0 wrote: > > and my goal is to block that & all OTHER mta hosts that have their > > NS on *.synapp.io or just synapp.io (just in case) > > Hehe, this brings to mind an old spam war story. Sorry, but this > might be of interest to this thread.
I've (re)read your 'story'. IIUC what this^^ effort is doing, I'm only blocking mail from mta hosts whose NS is hosted on these 'bad actor' domains. Since, for my money, they've lost my trust completely -- and on stubborn principle I don't like supporting their business model thru abuse of my server -- anybody who hosts at these bad actors can go pound sand. I think I've limited my blocks to that. Though, I'm keeping an eye on my logs for awhile, since I don't completely trust my postfix skills, either :-) > I was thinking like the one whose name I can't recall which sued > Spamhaus in US Federal court and almost took down the spamhaus.org > domain name when UK-based Spamhaus opted not to respond to the suit. > (Later Spamhaus did respond and solidly won.) Yeah, I remember that episode. But obviously what I do on my own server for my own needs, is my business :-) > FWIW, if you get spammed by MailChimp, they do staff and empower an > abuse desk. A report to them is not a waste of your time. I've reported to them in the past; seems to make a difference. What I don't appreciate is that they encourage THEIR customers to 'externally validate' their mailing lists. Sounds like a good thing, right? But they know darn well HOW those external validations are done, and by who. They just offload the bad action with a wink ... Well, that's my opinion and I'm sticking to it. Not clear what to DO about it, other than what I'm doing. > http://spammers.dontlike.us/ ... a mailing list which I [sort of] > co-manage ... this would be welcome there. Thanks. > > > In many cases you can do all your restrictions in one place, and > > > the usual choice for that would be smtpd_recipient_restrictions. > > > See again the aforementioned SMTPD_ACCESS_README. ... > The "Dangerous use" section describes it somewhat. I try to re-read it at least once every other day ;-) > BTDT, and I have lots of empty aspirin bottles to prove it. :) Once you get enough understanding of WHAT postfix does to be able to start step-by-step thinking it through, it's cool what you can actually do! But, I've learned you've GOT to be careful: "With great power comes great responsibility". Thanks. Jason