Re: Scoring by registrar?

2019-06-30 Thread Paul Stead
On Mon, 1 Jul 2019 at 06:38, Sean Lynch wrote: > It's pretty useful already. If you're able to get the name of the > registrar from that service, I think it might make a useful spam signal > since some registrars seem to be a lot more popular with spammers than > others. > Not really, essentiall

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On 6/30/19 9:41 PM, Paul Stead wrote: On Sun, 30 Jun 2019 at 19:46, Sean Lynch > wrote: On 6/30/19 11:40 AM, Grant Taylor wrote: > On 6/30/19 12:05 PM, John Hardin wrote: >> There's really no infrastructure for it. Somebody would have to hook >> i

Re: Scoring by registrar?

2019-06-30 Thread Paul Stead
On Sun, 30 Jun 2019 at 19:46, Sean Lynch wrote: > > On 6/30/19 11:40 AM, Grant Taylor wrote: > > On 6/30/19 12:05 PM, John Hardin wrote: > >> There's really no infrastructure for it. Somebody would have to hook > >> into the registrar data feeds to collect it and publish it in a > >> usable form,

Re: Scoring by registrar?

2019-06-30 Thread John Hardin
On Sun, 30 Jun 2019, Sean Lynch wrote: On June 30, 2019 11:20:33 AM PDT, John Hardin wrote: ...and if the same IP address is a regular abuser that never sends any legitimate traffic, tarpit them: http://www.impsec.org/~jhardin/antispam/spammer-firewall I do like the idea of tarpitting s

Re: Scoring by registrar?

2019-06-30 Thread John Hardin
On Sun, 30 Jun 2019, Grant Taylor wrote: On 6/30/19 12:05 PM, John Hardin wrote: There's really no infrastructure for it. Somebody would have to hook into the registrar data feeds to collect it and publish it in a usable form, and nobody has done so that I am aware of. Whois Domain Search ha

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On June 30, 2019 11:20:33 AM PDT, John Hardin wrote: >On Sun, 30 Jun 2019, Grant Taylor wrote: > >> On 6/30/19 10:51 AM, Martin Gregorie wrote: >>> If you don't mind a delay in receiving mail from hosts you've never >seen >>> before, why not implement a greylister? >>> >>> https://en.wikipedia

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On 6/30/19 11:40 AM, Grant Taylor wrote: On 6/30/19 12:05 PM, John Hardin wrote: There's really no infrastructure for it. Somebody would have to hook into the registrar data feeds to collect it and publish it in a usable form, and nobody has done so that I am aware of. Whois Domain Search h

Re: Scoring by registrar?

2019-06-30 Thread Grant Taylor
On 6/30/19 12:05 PM, John Hardin wrote: There's really no infrastructure for it. Somebody would have to hook into the registrar data feeds to collect it and publish it in a usable form, and nobody has done so that I am aware of. Whois Domain Search has some information. Link - Whois Domain Se

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On 6/30/19 11:05 AM, John Hardin wrote: On Sun, 30 Jun 2019, Sean Lynch wrote: A very large number (nearly all, in fact) of the spams I receive these days involve domains registered with Namecheap. I'd like to add a spam score to any message using a domain registered with them. Does such

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On 6/30/19 11:00 AM, Grant Taylor wrote: On 6/30/19 10:08 AM, Sean Lynch wrote: Hi, everyone! I used to run my own mail servers back in the mid '90s and even worked as the postmaster for a regional ISP and worked on mail servers for some large corporations and even a small national ISP as a

Re: Scoring by registrar?

2019-06-30 Thread John Hardin
On Sun, 30 Jun 2019, Grant Taylor wrote: On 6/30/19 10:51 AM, Martin Gregorie wrote: If you don't mind a delay in receiving mail from hosts you've never seen before, why not implement a greylister? https://en.wikipedia.org/wiki/Greylisting I see your GreyListing and raise you NoListing: htt

Re: Scoring by registrar?

2019-06-30 Thread Grant Taylor
On 6/30/19 10:51 AM, Martin Gregorie wrote: If you don't mind a delay in receiving mail from hosts you've never seen before, why not implement a greylister? https://en.wikipedia.org/wiki/Greylisting I see your GreyListing and raise you NoListing: https://en.wikipedia.org/wiki/Nolisting TL;DR

Re: Scoring by registrar?

2019-06-30 Thread John Hardin
On Sun, 30 Jun 2019, Sean Lynch wrote: A very large number (nearly all, in fact) of the spams I receive these days involve domains registered with Namecheap. I'd like to add a spam score to any message using a domain registered with them. Does such functionality already exist in SpamAssassi

Re: Scoring by registrar?

2019-06-30 Thread Grant Taylor
On 6/30/19 10:08 AM, Sean Lynch wrote: Hi, everyone! I used to run my own mail servers back in the mid '90s and even worked as the postmaster for a regional ISP and worked on mail servers for some large corporations and even a small national ISP as a consultant. After a hiatus where I drank the

Re: Scoring by registrar?

2019-06-30 Thread Sean Lynch
On 6/30/19 9:51 AM, Martin Gregorie wrote: On Sun, 2019-06-30 at 09:08 -0700, Sean Lynch wrote: A very large number (nearly all, in fact) of the spams I receive these days involve domains registered with Namecheap. I've received hundreds of spams involving .icu domains from what appear to be t

Re: Scoring by registrar?

2019-06-30 Thread Martin Gregorie
On Sun, 2019-06-30 at 09:08 -0700, Sean Lynch wrote: > A very large number (nearly all, in fact) of the spams I receive > these days involve domains registered with Namecheap. I've received > hundreds of spams involving .icu domains from what appear to be the > same spammer. > Write a local rule th

Scoring by registrar?

2019-06-30 Thread Sean Lynch
Hi, everyone! I used to run my own mail servers back in the mid '90s and even worked as the postmaster for a regional ISP and worked on mail servers for some large corporations and even a small national ISP as a consultant. After a hiatus where I drank the hosted email kool-aid, I'm back to hos