On 27/10/11 18:36, Jenny Lee wrote:
----------------------------------------
From: list...@abbacomm.net
To: users@spamassassin.apache.org
Subject: real world spamassassin experiences re: processing on servers emailing
from .info domains
Date: Thu, 27 Oct 2011 09:15:13 -0700
greetings SA users
there sure seems to be a lot of from .info server spamming
wierd temp registered .info domains spamming eh?
for those of you with volume, large or small, care to share an SA tips on
how you deal with .info domains?
i would imagine there is a very small percentage of valid emails coming from
.info domains
should we just pull the plug and reject all .info from touching the smtp
server or carefully craft SA rules?
real close to doing so and just reject them all, unless there is a list of
valids out there somewhere
thank you in advance
- rh
In 14 years, we never received any single legit mail from .info. It costs $1
per year to register an info domain, and if the people I do business cannot
afford $10 a year for their domain, they probably will not give me business to
start with.
We reject all .info on sendmail during transaction stage. Half of my rejected
connections are .info (rest are same-sender/same-recipient).
You have to assess your own situation.
Jenny
I haven't had to go as far as rejecting all .info domains yet, but I did
spot a trend a while back where snowshoe spammers where using
i...@example.info so I block those at the MTA with a simple PCRE:
/^info@[a-z0-9]+\.info$/ REJECT Looks like snowshoe
They seem to have moved on now though as I currently see very little
.info spam make it as far as SA.
Screwfix in the UK (a large online hardware [screws and nails type]
supplier) currently send out their mailings from em...@screwfix.info
even though their main site is at screwfix.com, so there are some legit
senders.
YMMV
