RE: Milter to block registrars

2014-05-27 Thread Marius Gologan
they never occur second time. -Original Message- From: James B. Byrne [mailto:byrn...@harte-lyne.ca] Sent: Wednesday, May 28, 2014 12:14 AM To: Marius Gologan Cc: postfix-users-dig...@cloud9.net Subject: RE: Milter to block registrars On Tue, May 27, 2014 16:26, Marius Gologan wrote: > &

Re: Milter to block registrars

2014-05-27 Thread Patrick Ben Koetter
* James B. Byrne : > Without going into a lot of detail and without naming names I wish to know if, > at the time of connection to Postfix, there exists any feasible means of > determining the registrar used by the connecting domain? As well, I would > like to know is there any practical means of

RE: Milter to block registrars

2014-05-27 Thread Bennett Todd
Given the situation, perhaps you could set up a resolver that blocks, or that's behind a packet filter that blocks, the IPs of the name servers they're using. That would catch it at the NS lookup, and would be no extra traffic, unlike whois.

RE: Milter to block registrars

2014-05-27 Thread James B. Byrne
On Tue, May 27, 2014 16:26, Marius Gologan wrote: > > Whois should definitely not be implemented in automated systems - read ToS > of RIPE, ARIN, LACNIC etc. > A special-made milter that will dig for details during the connection time > is not applicable. > A secondary benefit of greylist is IP ro

Re: Milter to block registrars

2014-05-27 Thread Eliezer Croitoru
On 05/27/2014 11:33 PM, James B. Byrne wrote: On Tue, May 27, 2014 15:32, Bennett Todd wrote: >Two thoughts. > >I've received legitimate email from a registrar where I was listed as a >contact for a domain. If no one uses an email address in your domain to >register, that's not a problem. Well y

Re: Milter to block registrars

2014-05-27 Thread James B. Byrne
On Tue, May 27, 2014 15:32, Bennett Todd wrote: > Two thoughts. > > I've received legitimate email from a registrar where I was listed as a > contact for a domain. If no one uses an email address in your domain to > register, that's not a problem. I am attempting to be circumspect with respect to

RE: Milter to block registrars

2014-05-27 Thread Marius Gologan
Whois should definitely not be implemented in automated systems - read ToS of RIPE, ARIN, LACNIC etc. A special-made milter that will dig for details during the connection time is not applicable. A secondary benefit of greylist is IP rotation. That will provide you an insight about some networks ,

Re: Milter to block registrars

2014-05-27 Thread Robert Schetterer
Am 27.05.2014 21:19, schrieb James B. Byrne: > Without going into a lot of detail and without naming names I wish to know if, > at the time of connection to Postfix, there exists any feasible means of > determining the registrar used by the connecting domain? As well, I would > like to know is the

Re: Milter to block registrars

2014-05-27 Thread LuKreme
On 27 May 2014, at 13:19 , James B. Byrne wrote: > Without going into a lot of detail and without naming names I wish to know if, > at the time of connection to Postfix, there exists any feasible means of > determining the registrar used by the connecting domain? Not really. Even if you wrote

Re: Milter to block registrars

2014-05-27 Thread Wietse Venema
James B. Byrne: > Without going into a lot of detail and without naming names I wish to know if, > at the time of connection to Postfix, there exists any feasible means of > determining the registrar used by the connecting domain? As well, I would Beware, some whois servers enforce rate limits, s

Re: Milter to block registrars

2014-05-27 Thread Bennett Todd
Two thoughts. I've received legitimate email from a registrar where I was listed as a contact for a domain. If no one uses an email address in your domain to register, that's not a problem. And second, whois is the way I query to find out about a domain, answers to questions like who registe