I have affected a hefty penalty in SA to any mail that comes from one of
these TLDs:
(party|science|click|link|faith|racing|win|zip|review|country|kim|cricket|work|gq|date|lol|top|download|space|site|online)
.xyz used to be on the list but I have started seeing more legitimate
traffic from there.
Domains are being added and removed as new TLDs are added or
false-positives are detected.
On 2016-04-27 15:57, Vincent Fox wrote:
The ".top" subject, reminded to go check my stats since April 1st.
Yes indeedy .top is on TOP by a mile! Rejecting over 2 million!
ICANN should shut them down or do SOMETHING.
I bow my head only for the shattered ruins of .science.
2013500 top
627059 download
400169 (assorted specific rejections)
277597 date
254568 science
148238 xyz
49299 pro
26324 bid
22645 tk
22456 website
14679 email
11988 link
8490 uno
8306 win
6463 trade
6153 click
4855 ninja
3087 review
2517 club
1566 pw
________________________________________
From: Reindl Harald <h.rei...@thelounge.net>
Sent: Tuesday, April 26, 2016 2:55:46 AM
To: users@spamassassin.apache.org
Subject: Re: Anyone else just blocking the ".top" TLD?
Am 26.04.2016 um 11:23 schrieb Heinrich Boeder:
Hi,
On Apr 21, 2016, at 3:43 PM, Vincent Fox <vb...@ucdavis.edu> wrote:
Recently seeing increase in spam from these gTLD:
pro
bid
trade
I didn´t see any spam from .pro, .bid or .trade gTLDs either. I was just
wondering if it doesn´t make more sense to just give those domains a
higher score in SA instead of blocking them right away with a MTA based
REJECT Policy
just enforce SPF in the MTA with a clear reject message as first step
we do do that for all new gTLDs for a long time now automated by fetch
current list from IANA every 24 hours and write MTA configs
check_policy_service unix:private/spf-policy
check_sender_access proxy:pcre:/etc/postfix/blacklist_tld.cf