[pfx] PDS_OTHER_BAD_TLD

2023-09-03 Thread roughnecks via Postfix-users

Hello, first time here.

I'm struggling with an issue for a .space domain which gets triggered by 
Spamassassin as PDS_OTHER_BAD_TLD (Unthrustworty TLDs). Gmail is 
rejecting all of my emails for that reason.


I recently bought this new .eu domain and trying to fix the issue I set 
up a virtual alias domain in postfix.


Now I can send my mails (changing sender address from space to eu) using 
the same users I had (have) for the .space domain without issues, even 
to google but if I perform an online test for the .eu domain, it still 
references my .space domain and I don't know where that is coming from..


Here's my latest test: https://www.mail-tester.com/test-w8p3e18tf

For that test I also tried changing my server's hostname and PTR to make 
it point to the new eu domain, to no avail.


Can anyone help me solve this issue? If you need more info, just ask.

Thanks, have a nice week ahead!

--
roughnecks


OpenPGP_0x8FBF94AC1E006074.asc
Description: OpenPGP public key
BEGIN:VCARD
VERSION:4.0
N:;Simone;;;
NICKNAME:roughnecks
EMAIL;PREF=1:roughne...@woodpeckersnest.eu
URL:https://woodpeckersnest.space/
TZ:Europe/Rome
TEL;VALUE=TEXT:+3907331776018
IMPP:xmpp:roughnecks@woodpeckersnest.space
IMPP:sip:5382...@sip.messagenet.it
END:VCARD


OpenPGP_signature
Description: OpenPGP digital signature
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread postfix--- via Postfix-users

Now I can send my mails (changing sender address from space to eu) using the 
same users I had (have) for the .space domain without issues, even to google 
but if I perform an online test for the .eu domain, it still references my 
.space domain and I don't know where that is coming from..

Here's my latest test: https://www.mail-tester.com/test-w8p3e18tf
For that test I also tried changing my server's hostname and PTR to make it 
point to the new eu domain, to no avail.
Can anyone help me solve this issue? If you need more info, just ask.



The PTR hasn't been fixed or hasn't finished propagating yet.

  > nslookup pandora.woodpeckersnest.eu
  Name:pandora.woodpeckersnest.eu
  Address: 51.195.43.203

  > nslookup 51.195.43.203
  Name:pandora.woodpeckersnest.space
  Address: 51.195.43.203

The IP still responds with .space
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread mailmary--- via Postfix-users


maybe spamassassin is reading your vCard (.vcf) which has the following string:

URL:https://woodpeckersnest.space/


btw, yes .space is considered a "bad domain" frequently abused for spam. But I 
think it was recently removed from spamassassin bad domains.

https://apache.googlesource.com/spamassassin/+/refs/heads/trunk/rulesrc/sandbox/pds/20_ntld.cf


On Sun, 3 Sep 2023 22:03:02 +0200 roughnecks via Postfix-users 
 wrote:

> Hello, first time here.
> 
> I'm struggling with an issue for a .space domain which gets triggered by 
> Spamassassin as PDS_OTHER_BAD_TLD (Unthrustworty TLDs). Gmail is 
> rejecting all of my emails for that reason.
> 
> I recently bought this new .eu domain and trying to fix the issue I set 
> up a virtual alias domain in postfix.
> 
> Now I can send my mails (changing sender address from space to eu) using 
> the same users I had (have) for the .space domain without issues, even 
> to google but if I perform an online test for the .eu domain, it still 
> references my .space domain and I don't know where that is coming from..
> 
> Here's my latest test: https://www.mail-tester.com/test-w8p3e18tf
> 
> For that test I also tried changing my server's hostname and PTR to make 
> it point to the new eu domain, to no avail.
> 
> Can anyone help me solve this issue? If you need more info, just ask.
> 
> Thanks, have a nice week ahead!
> 
> -- 
> roughnecks
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread Viktor Dukhovni via Postfix-users
On Sun, Sep 03, 2023 at 10:03:02PM +0200, roughnecks via Postfix-users wrote:

[ Nothing in this thread is about Postfix, so this is not the right
  forum for further discussion. ]

> I'm struggling with an issue for a .space domain which gets triggered by
> Spamassassin as PDS_OTHER_BAD_TLD (Unthrustworty TLDs). Gmail is rejecting
> all of my emails for that reason.

Unlikely "for that reason", because I doubt that Gmail is using
SpamAssassin, and certainly not an outdated version.

commit 29e753e5ba16ac3bdb0edda03e92a7c9328181f1
Author: Bill Cole 
Date:   Wed Apr 20 18:02:27 2022 +

remove .space from TLD lists and remove test rule which demo'd the 
issue (BZ#7953)

Assigning spam scores to TLDs seems fairly dubious to me, the TLD would
have to be mismanaged to the point of deliberate gross negligence before
it made sense to score the TLD, rather than the specific message content.

Aside from the FreeNom ccTLDs, I can't think of any cases where that would
apply.


https://krebsonsecurity.com/2023/05/phishing-domains-tanked-after-meta-sued-freenom/

https://domainincite.com/28814-millions-of-domains-to-be-deleted-as-freenom-loses-its-first-tld

> Now I can send my mails (changing sender address from space to eu) using the
> same users I had (have) for the .space domain without issues, even to google
> but if I perform an online test for the .eu domain, it still references my
> .space domain and I don't know where that is coming from..
>
> Here's my latest test: https://www.mail-tester.com/test-w8p3e18tf

An "online test" is only as good as its maintainers (or lack thereof)
are able to make it.  This particular test is using an outdated version
of SpamAssassin, which puts its quality in some doubt.

> BEGIN:VCARD
> VERSION:4.0
> N:;Simone;;;
> NICKNAME:roughnecks
> EMAIL;PREF=1:roughne...@woodpeckersnest.eu
> URL:https://woodpeckersnest.space/
> TZ:Europe/Rome
> TEL;VALUE=TEXT:+3907331776018
> IMPP:xmpp:roughnecks@woodpeckersnest.space
> IMPP:sip:5382...@sip.messagenet.it
> END:VCARD

On Sun, Sep 03, 2023 at 11:34:37PM +0300, mailmary--- via Postfix-users wrote:
> 
> maybe spamassassin is reading your vCard (.vcf) which has the following 
> string:
> 
> URL:https://woodpeckersnest.space/

Indeed that vcard URL could be the source of the outdated SA score.

-- 
Viktor.
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread roughnecks via Postfix-users

Il 03/09/2023 22:34, mailmary--- via Postfix-users ha scritto:
 >
 > maybe spamassassin is reading your vCard (.vcf) which has the 
following string:

 >
 > URL:https://woodpeckersnest.space/

Bingo! Thanks
https://www.mail-tester.com/test-65luqzkci

 > btw, yes .space is considered a "bad domain" frequently abused for 
spam. But I think it was recently removed from spamassassin bad domains.


I get this from google:

Remote-MTA: dns; gmail-smtp-in.l.google.com (66.102.1.27)
Diagnostic-Code: smtp; 550 5.7.1 Our system has
  detected that this message is likely suspicious due to the very low 
reputation
  of the sending domain. To best protect our users from spam, the 
message has
  been blocked. Please visit 
https://support.google.com/mail/answer/188131 for
  more information. 
i39-20020a05600c4b2700b003fe19c9081dsi3181476wmp.150 - gsmtp

  (in reply to EOD command)

--
roughnecks


OpenPGP_0x7F7BD39236418FAC.asc
Description: OpenPGP public key


OpenPGP_0x8FBF94AC1E006074.asc
Description: OpenPGP public key
BEGIN:VCARD
VERSION:4.0
N:;Simone;;;
NICKNAME:roughnecks
EMAIL;PREF=1:roughne...@woodpeckersnest.eu
URL:https://woodpeckersnest.space/
TZ:Europe/Rome
TEL;VALUE=TEXT:+3907331776018
IMPP:xmpp:roughnecks@woodpeckersnest.space
IMPP:sip:5382...@sip.messagenet.it
END:VCARD


OpenPGP_signature
Description: OpenPGP digital signature
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread roughnecks via Postfix-users

Il 03/09/2023 22:22, postfix--- via Postfix-users ha scritto:

The PTR hasn't been fixed or hasn't finished propagating yet.


nah, I said I tried with this new PTR but then I changed everything back 
to .space


--
roughnecks


OpenPGP_0x7F7BD39236418FAC.asc
Description: OpenPGP public key


OpenPGP_0x8FBF94AC1E006074.asc
Description: OpenPGP public key
BEGIN:VCARD
VERSION:4.0
N:;Simone;;;
NICKNAME:roughnecks
EMAIL;PREF=1:roughne...@woodpeckersnest.eu
URL:https://woodpeckersnest.space/
TZ:Europe/Rome
TEL;VALUE=TEXT:+3907331776018
IMPP:xmpp:roughnecks@woodpeckersnest.space
IMPP:sip:5382...@sip.messagenet.it
END:VCARD


OpenPGP_signature
Description: OpenPGP digital signature
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: PDS_OTHER_BAD_TLD

2023-09-03 Thread roughnecks via Postfix-users

Il 03/09/2023 22:59, Viktor Dukhovni via Postfix-users ha scritto:

Unlikely "for that reason", because I doubt that Gmail is using
SpamAssassin, and certainly not an outdated version.


How do you read this then?

Remote-MTA: dns; gmail-smtp-in.l.google.com (66.102.1.27)
Diagnostic-Code: smtp; 550 5.7.1 Our system has
  detected that this message is likely suspicious due to the very low 
reputation
  of the sending domain. To best protect our users from spam, the 
message has
  been blocked. Please visit 
https://support.google.com/mail/answer/188131 for
  more information. 
i39-20020a05600c4b2700b003fe19c9081dsi3181476wmp.150 - gsmtp

  (in reply to EOD command)

--
roughnecks


OpenPGP_0x7F7BD39236418FAC.asc
Description: OpenPGP public key


OpenPGP_0x8FBF94AC1E006074.asc
Description: OpenPGP public key


OpenPGP_signature
Description: OpenPGP digital signature
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org