> On Wed, 17 Jan 2024 15:35:42 +0100, Hans-Martin Mosner via mailop > <mailop@mailop.org> wrote: > > >Am 17.01.24 um 15:20 schrieb Paul Menzel via mailop: > >> With this in mind, did somebody compile a block list yet? Or should I just > >> create a whitelist? > > > >A block list does not make sense, as new domains are added continuously. > >It's just too simple. > > I have noticed the predominance of "x----.onmicrosoft.com" domains in the spam > sump here. In many cases, the envelope from and the "friendly" from contain > different x----- domains, and these rotate rapidly. They are either created > algorithmically, or by persons diddling their fingers on a keyboard.
The well-known acronym of "YMMV" (Your Mileage May Vary) - or the Canadian alternative of "YKMV" (Your Kilometerage May Vary) - comes to mind as the effects seem to be somewhat inconsistent. For example, I'm not seeing names of farm animals and vehicle brands intermixed in the third level of the hostnames anymore, and I wonder how long the pattern you're encountering will last. > Twelve years back, when I was on the team that theoretically combated > electronic used food both entering and exiting the Office 365 system, we saw > the same evolving set of tricks that some of us had encountered back in the > Dialup Epoch. I wrote the front end for a lights-out dialup account creation > and provisioning system, and before long the volume of code designed to > prevent new accounts far exceeded that devoted to establishing new accounts. > After the Company changed hands, this focus was removed from the system that > replaced mine. > > All of this is to say, you must have an active rather than reactive response > to hostile usage of your system, whether there is definite and immediate > revenue loss, or not. I agree. Any system that shows consistency is eventually going to be countered by spammers, so it's a constant uphill battle. :( > My diagnosis of MSFT's problem in doing anything effective is that the > fundamental model of the service does not entertain the notion of a strong > focus on being a constructive member of the net.community. I don't know the > current situation, but our quest to discover who actually reads and acts upon > messages to postmas...@microsoft.com or ab...@microsoft.com eventually > returned the answer "nobody, really". > > mdr They're no longer bouncing from those addresses? I guess that's progress of a sort. I agree with your diagnosis -- it does seem like they really don't care, and that they have an exploitive attitude about internet mail. -- Postmaster - postmas...@inter-corporate.com Randolf Richardson, CNA - rand...@inter-corporate.com Inter-Corporate Computer & Network Services, Inc. Vancouver, British Columbia, Canada https://www.inter-corporate.com/ _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop