On 09-04-2020 01:01, @lbutlr wrote:
Given an email address of user+ama...@example.com how can I reject all emails
to that address that do not come from amazon.com?
I think I did something like this once but if I did, I didn’t keep notes. :/
A slightly different take on this:
I'm using address extensions like this for more than 10 years, for
almost every commercial interaction through the web. I'm using the
domain name of the website of the party that I'm giving my address to,
or a reference to the mobile app that wants me to sign up.
I haven't seen any abuse (a company bought or repurposed an address)
except for 1 specific incident. Maybe I'm too picky about doing business
with shady companies... The number of addresses handed out should be in
the hundreds.
What I took from this:
- Handing out addresses is easy, but it's hard to keep track of them. I
can create new addresses on the fly on any occasion (anything I make up
is accepted by my server), but to remember them and write a specific
line in my postfix config for them later that day, is hard. If you want
rules in your spam setup for this, they should be automated: f.i. a
regexp that matches the label in the recipient address to be (part of)
the sender address.
- Matching actual senders with the label you give them is a grey area.
Many senders use a less brand-specific email-sending platform than what
you expected when you made up the label: f.i. an online order at
bbq-stuff.org actually sends mail from the company-wide domain
garden-apparel.com. These matches need human interpretation (or a very
large database and sufficient input data) before you can decide whether
someone is actually doing something wrong.
- The few actual wrongdoers you will be catching are probably more
interesting to receive and keep for research purposes, than to simply
reject.
My 2 cents on this.
Kind regards,
Tom