> -----Original Message----- > From: Kevin A. McGrail [mailto:kmcgr...@pccc.com] > Sent: Tuesday, March 10, 2015 1:31 PM > To: Kevin Miller; users@spamassassin.apache.org > Subject: Re: Bogus day old domains from RRPPROXY.NET > > On 2/19/2015 2:50 PM, Kevin Miller wrote: > > Is there a way to reject or up the score on anything that is served up > by that name server or registar? I was thinking maybe putting the > rrproxy.net nameserver in my dns as 127.0.0.1, on the theory that if it > doesn't resolve the message will be rejected at the MTA level. > Hi Kevin, > > I thought there was a feature for this, perhaps AskDNS. > > From https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6518, > > askdns L_URI_NXDOMAIN_NS _URIDOMAINS_ NS [NXDOMAIN] > > But you might need an RBL server to query. > > Mark, any input on how best to block a URI that ties to a namserver like > these? > > Name Server: NS1.RRPPROXY.NET > Name Server: NS2.RRPPROXY.NET > Name Server: NS3.RRPPROXY.NET
FWIW, I put on my BOFH hat, and just blocked those name servers at the filewall. They're based in Germany so it's a pretty safe bet that I'm not going to see legitimate mail from any of the legitimate domains hosted by them. That may not be the case for others. My spam level dropped significantly. ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357
