Re: [mailop] "unmaintained" milter (was: Help with handling backscatter)

2024-07-12 Thread ml+mailop--- via mailop
On Fri, Jul 12, 2024, Jesse Hathaway via mailop wrote: > I am a little wary of standing it up, given the lack of maintained open > source milters. If a program just works, why should it be updated? -- Please don't Cc: me, use only the list for replies, even if the mailing list software screws u

Re: [mailop] getting unblocked at outlook?

2024-07-12 Thread incoming-mailop--- via mailop
On 7/11/24 12:52 PM, Michael W. Lucas via mailop wrote: > Just started getting these today. Looks like one of my colo neighbors > behaved badly. No useful info at the suggested link, no contact > given. Any suggestions on how to get my address unblocked? > > > host > outlook-com.olc.protection.

Re: [mailop] Help with handling backscatter

2024-07-12 Thread Grant Taylor via mailop
On 7/12/24 14:57, Jesse Hathaway via mailop wrote: I had not yet considered it. It looks like there is a milter available, but it is unmaintained. I would be a little wary of setting it up, given the lack of maintenance. :-/ Are there other opensource BATV milters? It's not BATV but it doe

[mailop] Telekom to Yahoo/att

2024-07-12 Thread Jeff Pang via mailop
Hello list, I am also using Telekom's email service. But telekom has the issues on sending messages to all aol/yahoo/att servers. Here are the bounce message. : host mta7.am0.yahoodns.net[67.195.228.94] said: 421 4.7.0 [TSS04] Messages from 194.25.134.84 temporarily deferred due to

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Jeff Pang via mailop
On 2024-07-13 05:19, Mark E. Jeftovic via mailop wrote: I'm just wondering what the techniques are for monitoring this. This is how fastmail does: VadeSecure uses "fingerprints" to identify messages it thinks are spam. A "fingerprint" is any unique string in a message. They commonly include

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Mark E. Jeftovic via mailop
I'm just wondering what the techniques are for monitoring this. The cisco logging is one way to do it. I'll post more as I come across them On 2024-07-12 4:56 PM, Jeff Pang via mailop wrote: Some ISP monitor the outgoing messages for spam detection. For example, Cogent, if an IP sends some am

Re: [mailop] Help with handling backscatter

2024-07-12 Thread Slavko via mailop
Dňa 12. júla 2024 20:45:30 UTC používateľ Jesse Hathaway via mailop napísal: >BATV seems like the best solution, but as said in my rely to Mark Alley, >I am a little wary of standing it up, given the lack of maintained open >source milters. I didn't notice which MTA you are using. Exim has tool

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Jeff Pang via mailop
Some ISP monitor the outgoing messages for spam detection. For example, Cogent, if an IP sends some amount Spams (IIRC 10) they will charge the downstream VPS company $20. On 2024-07-13 03:36, Mark E. Jeftovic via mailop wrote: On 2024-07-12 2:21 PM, Marco Moock wrote: Am 12.07.2024 um 10:57

Re: [mailop] Help with handling backscatter

2024-07-12 Thread Jesse Hathaway via mailop
On Thu, Jul 11, 2024 at 4:33 PM Slavko via mailop wrote: > Do you see in bounces from what IP was original send? No, not that I can find > The BATV was inventend to solve that problem, you sign own Return-Path > and then check this signature in bounces and reject when bounce (NDR) > is send to

Re: [mailop] Help with handling backscatter

2024-07-12 Thread Jesse Hathaway via mailop
On Thu, Jul 11, 2024 at 4:17 PM Michael Peddemors via mailop wrote: > Can you add a little more details to be sure? Are you using Google > services at all? Employees of the Wikimedia Foundation have Google Workspace accounts, our MX servers for wikimedia.org relay employee mail to Google's server

Re: [mailop] Help with handling backscatter

2024-07-12 Thread Jesse Hathaway via mailop
On Thu, Jul 11, 2024 at 3:45 PM Mark Alley via mailop wrote: > Is BATV an option for you? I had not yet considered it. It looks like there is a milter available, , but it is unmaintained. I would be a little wary of setting it up, given the lack of

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Marco Moock via mailop
Am 12.07.2024 um 12:36:10 Uhr schrieb Mark E. Jeftovic: > On 2024-07-12 2:21 PM, Marco Moock wrote: > > Am 12.07.2024 um 10:57:15 Uhr schrieb Mark E Jeftovic via mailop: > > > > Implement a policy that if big amounts of spam are going out you can > > immediately block outgoing port 25. > Is ther

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Mark E. Jeftovic via mailop
On 2024-07-12 2:21 PM, Marco Moock wrote: Am 12.07.2024 um 10:57:15 Uhr schrieb Mark E Jeftovic via mailop: Implement a policy that if big amounts of spam are going out you can immediately block outgoing port 25. Is there anything commonly used for monitoring the level of outbound SMTP? Or are

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread L. Mark Stone via mailop
All of the providers with whom we are familiar block TCP Port 25 Outbound by default, either entirely, or, except to approved paid relaying partner-providers. If you want to send outbound email directly, there is an application/approval process to be followed. AWS over the past few months has

Re: [mailop] Best practices for VPS providers?

2024-07-12 Thread Marco Moock via mailop
Am 12.07.2024 um 10:57:15 Uhr schrieb Mark E Jeftovic via mailop: > But let’s say they get a VM provisioned - now what? Block outgoing connections to port 25 by default, tell that the customers and only enable it for users who intentionally want it. Implement a policy that if big amounts of spam

Re: [mailop] safe-mail.net

2024-07-12 Thread Benny Pedersen via mailop
Bill Cole via mailop skrev den 2024-07-12 16:13: Any SMTP client which does not fall back to the A record when no MX records exists is fundamentally broken. and here its more fun when domain is nullMX it would be fail to failback to A/ :) sendmail -f yourmailaddrhere -bv f...@example.or

[mailop] Best practices for VPS providers?

2024-07-12 Thread Mark E Jeftovic via mailop
The responsible cloud hosts thread has me wondering about the state of the art of best practices for VPS providers When someone provisions a VPS there’s a danger that they’ll just spin up and blast - if they’re using stolen credit cards, etc you can mitigate and filter on that side using frau

Re: [mailop] Cloud hosts for responsible mail servers?

2024-07-12 Thread John Levine via mailop
It appears that Alessandro Vesely via mailop said: >Stupid as it is, DMARC is the best attempt we have at shifting >reputation gathering from IP numbers to domain names. You misspelled DKIM. R's, John ___ mailop mailing list mailop@mailop.org https://

Re: [mailop] Cloud hosts for responsible mail servers?

2024-07-12 Thread Alessandro Vesely via mailop
Il 10/07/24 02:18, Lyndon Nerenberg (VE7TFX/VE6BBM) via mailop ha scritto: I publish SPF records, but refuse to participate in DKIM or DMARC. By avoiding the latter two, I don't have to navigate all their associated stupidity, and my mail goes through just fine. Stupid as it is, DMARC is the b

Re: [mailop] getting unblocked at outlook?

2024-07-12 Thread Ralf Schenk🔴 via mailop
Dear List, I have the same problem (reaching @outlook.com and @hotmail.com) for a mail-service handcrafted for sending side govermental "German Environment Agency's Single-Use Plastics Fund platform" see https://www.einwegkunststofffonds.de/en It's built in an azure tenant of german governme

Re: [mailop] safe-mail.net

2024-07-12 Thread Mark Delany via mailop
On 12Jul24, Bill Cole via mailop apparently wrote: > > Nearly 1/2 a century later, it's still the case that most mail clients > > will look for address RRs in the absence of an MX. > > Because failing to do so would be ignoring a requirement of the SMTP > specification. Yes. Everyone knows this

Re: [mailop] safe-mail.net

2024-07-12 Thread Bill Cole via mailop
On 2024-07-11 at 23:35:05 UTC-0400 (Fri, 12 Jul 2024 03:35:05 +) Mark Delany via mailop is rumored to have said: Nearly 1/2 a century later, it's still the case that most mail clients will look for address RRs in the absence of an MX. Because failing to do so would be ignoring a requirem