On 2020-06-13 03:02, Dave Funk wrote:
This sounds like a perfect application for a custom DNS-bl lookup/list.
Create a local custom rbldnsd server "dnset" zone from a data file
with your blessed TLDs, then a rule doing a rbl check using the
hostname from the From address with custom scoring.
You can easily update the rbldnsd zone data (just write/update the
data file, no need to restart spamd) and could create a custom scoring
value based on the DNS data (EG 127.0.0.2 for really 'good' TLDs,
127.0.0.4 for 'so-so' and 127.0.0.8 for truely spammy names).
https://www.isc.org/blogs/qname-minimization-and-privacy/
lets hope rbldnsd is soon to handle that
i have disabled this breaking dnsbl feature in bind9
