On Thu, 2022-03-24 at 18:34 -0600, Grant Taylor wrote:
> On 3/24/22 5:00 PM, Michael Grant wrote:
> > List-Unsubscribe:
> > <mailto:leave-abcefgh.1.2....@mumble.aidemxwzlwt.bwbibibi.edu>
> >
> > I want to extract the mumble.aidemxwzlwt.bwbibibi.edu and run it
> > through AskDNS and if I get an NXDOMAIN, I want to score it.
>
> Remember, there are historic mechanisms for an MX for parent domains
> to
> handle child domains even if the child domain in question doesn't have
> it's own MX record.
>
> I don't recall the current state of support for this, so don't rely on
> it without testing it.
>
> > Is it possible to do this within a cf file?
>
Yes. You'll need to write a Perl plugin and a rule to trigger it. The
rule should extract the domain name from the 'mailto:' string and pass
it to the Perl plugin, which in turn calls AskDNS with the string as a
parameter and either returns a positive score or zero depending on
whether AskDNS returned NXDOMAIN or not.
Its all simple enough and requires only a few lines pf Perl: I haven't
needed a plugin to do what you want, but did write one that searches a
PostgreSQL database and whitelists e-mail from anybody that I've
previously sent mail to.
Get a copy of the 'Camel' book of you don't have one ("Programming Perl"
by Wall, Chrtiansen & Orwant, pub: O'Reilly).
The requirements for writing plugins are on the SA website.
Martin
