On 29 Jun 2021, at 04:50, Martin Gregorie <mar...@gregorie.org> wrote: > On Tue, 2021-06-29 at 00:52 -0400, Bill Cole wrote: >> On 2021-06-28 at 17:04:05 UTC-0400 (Mon, 28 Jun 2021 23:04:05 +0200) >> Robert Harnischmacher <robert.harnischmac...@publicare.de> >> is rumored to have said:
>>> In which form can one submit the subdomain of a mail sender for the >>> integration in 60_whitelist_auth.cf. Which information is required >>> for >>> consideration? > There's nothing preventing yo from maintaining your own whitelist (and > blacklist). > > I wrote my own automatic whitelister, which whitelists mail from anybody > I've sent mail to. It works by scanning my outgoing mail stream: almost > no maintenance needed and it would be quite difficult to spoof. Sending spam, viruses, ransom demands, and/or spearfishing from "known" addresses is extremely common, so how effective that is depends a lot on the sort of mail and the amount of mail you receive. It is very common for me to get spam mail that appears to be from known addresses, mostly clients and the less sophisticated family members (computer sophisticated, at least) who have the bad habit of sharing their contacts with whatever random app they download. > I also manually maintain a private blacklist, which contains the 'From' > addresses of advertising e-mails from companies that I've dealt with in > the past. This works because many (most?) companies use different > subdomains for advertising messages than they use for order > confirmations etc. This makes blacklisting the advertising 'From' > addresses very simple to do and is a manual process. If a company insists on sending me advertising mail I do not want, I don't want to do any business with that company. -- 'You're your own worst enemy, Rincewind,' said the sword. Rincewind looked up at the grinning men. 'Bet?' --Colour of Magic