On 09 Jul 2016, at 08:32, jaso...@mail-central.com wrote: > > Fwiw, atm I block all of the following TLDs
> [big list] > That list is auto-generated. Any & all TLDs that have sent > 100 messages > within the last year *AND* have a spam/reject rate >= 99% get blocked by TLD, > never get past by mail server's 'edge', and don't impose any further load on > my server. That’s a good list, but I take a different approach, I block ALL tlds except for a few that I actually get mail from. (com|net|org|edu|gov|mx|de|dk|uk|us|info|biz|eu|es|il|it|nl|name|jp) (and I’m not sure about name anymore, I don’t think I get legit mail from that anymore.) Of course, other people will have other lists, but this one works well for me. .top is the biggest offender though, we get thousands of those. I should write up an awk script that searches my maillog for all the tlds that try to connect. Well, I can throw something together in a Here are all the tlds that I’ve seen in the last week (only searching in from=<…> not helo): .ae, .ar, .at, .au, .bd, .be, .bg, .bid, .biz, .bo, .br, .ca, .cc, .ch, .cl, .club, .cn, .co, .com, .coop, .cz, .date, .de, .dk, .ec, .edu, .es, .eu, .fi, .firewall, .fr, .gdn, .gov, .gr, .hk, .hr, .hu, .id, .ie, .il, .in, .info, .ir, .is, .it, .jp, .kh, .kornet, .kr, .lan, .localdomain, .lt, .lv, .ma, .mail, .md, .me, .men, .mk, .mobi, .mv, .mx, .my, .name, .net, .ng, .nl, .no, .nz, .online, .org, .orgt, .pa, .pe, .pl, .pt, .pw, .ro, .rs, .ru, .se, .sk, .stream, .tk, .tn, .top, .tr, .tw, .uk, .us, .vn, .website, .win, .xyz, .za And this is the list from helo (ignoring all the IPs): adsl, ae, ao, ar, arpa, au, bd, be, bg, bid, biz, bo, br, c, ca, cc, cl, club, cm, cn, co, com, cy, date, de, do, ec, edu, eg, es, eu, fi, firewall, gdn, gh, gov, gr, hu, id, il, in, info, internal, io, ir, it, jp, ke, kh, kornet, kr, la, lan, local, localdomain, lt, lv, ly, ma, mail, md, me, men, mobi, mv, mx, my, name, net, ni, nl, no, np, online, org, orgt, pe, pk, pl, pt, pw, rs, ru, sg, sk, so, space, stream, th, tk, top, tr, tv, tw, uk, us, uy, vn, website, win, ws, xyz, za, zw How are people doing spam counts on a tld basis?
