I have affected a hefty penalty in SA to any mail that comes from one of these TLDs:

(party|science|click|link|faith|racing|win|zip|review|country|kim|cricket|work|gq|date|lol|top|download|space|site|online)

.xyz used to be on the list but I have started seeing more legitimate traffic from there.

Domains are being added and removed as new TLDs are added or false-positives are detected.

On 2016-04-27 15:57, Vincent Fox wrote:
The ".top" subject, reminded to go check my stats since April 1st.
Yes indeedy .top is on TOP by a mile!  Rejecting over 2 million!
ICANN should shut them down or do SOMETHING.

I bow my head only for the shattered ruins of .science.

2013500 top
  627059 download
  400169  (assorted specific rejections)
  277597 date
  254568 science
  148238 xyz
   49299 pro
   26324 bid
   22645 tk
   22456 website
   14679 email
   11988 link
    8490 uno
    8306 win
    6463 trade
    6153 click
    4855 ninja
    3087 review
    2517 club
    1566 pw

________________________________________
From: Reindl Harald <h.rei...@thelounge.net>
Sent: Tuesday, April 26, 2016 2:55:46 AM
To: users@spamassassin.apache.org
Subject: Re: Anyone else just blocking the ".top" TLD?

Am 26.04.2016 um 11:23 schrieb Heinrich Boeder:
Hi,

On Apr 21, 2016, at 3:43 PM, Vincent Fox <vb...@ucdavis.edu> wrote:
Recently seeing increase in spam from these gTLD:

pro
bid
trade
I didn´t see any spam from .pro, .bid or .trade gTLDs either. I was just
wondering if it doesn´t make more sense to just give those domains a
higher score in SA instead of blocking them right away with a MTA based
REJECT Policy
just enforce SPF in the MTA with a clear reject message as first step

we do do that for all new gTLDs for a long time now automated by fetch
current list from IANA every 24 hours and write MTA configs

   check_policy_service unix:private/spf-policy
   check_sender_access proxy:pcre:/etc/postfix/blacklist_tld.cf


Reply via email to