On 03/10/2015 11:01 PM, Kevin Miller wrote:
-----Original Message-----
From: Kevin A. McGrail [mailto:kmcgr...@pccc.com]
Sent: Tuesday, March 10, 2015 1:31 PM
To: Kevin Miller; users@spamassassin.apache.org
Subject: Re: Bogus day old domains from RRPPROXY.NET

On 2/19/2015 2:50 PM, Kevin Miller wrote:
Is there a way to reject or up the score on anything that is served up
by that name server or registar?  I was thinking maybe putting the
rrproxy.net nameserver in my dns as 127.0.0.1, on the theory that if it
doesn't resolve the message will be rejected at the MTA level.
Hi Kevin,

I thought there was a feature for this, perhaps AskDNS.

  From https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6518,

askdns L_URI_NXDOMAIN_NS _URIDOMAINS_  NS [NXDOMAIN]

But you might need an RBL server to query.

Mark, any input on how best to block a URI that ties to a namserver like
these?

     Name Server: NS1.RRPPROXY.NET
     Name Server: NS2.RRPPROXY.NET
     Name Server: NS3.RRPPROXY.NET

FWIW, I put on my BOFH hat, and just blocked those name servers at the 
filewall.  They're based in Germany so it's a pretty safe bet that I'm not 
going to see legitimate mail from any of the legitimate domains hosted by them. 
 That may not be the case for others.

My spam level dropped significantly.


Thse NS are run by Key-Systems, a german registrar. If this is a personal server, ok, but if you have more users than your family, I wouldn't hard block using that NS.

omain Name: rrpproxy.net
Registry Domain ID: 69690466_DOMAIN_NET-VRSN
Registrar WHOIS Server: whois.rrpproxy.net
Registrar URL: http://www.key-systems.net
Updated Date: 2014-01-31T09:26:14.0Z
Creation Date: 2001-04-19T18:39:15.0Z
Registrar Registration Expiration Date: 2023-04-19T18:39:15.0Z
Registrar: Key-Systems GmbH
Registrar IANA ID: 269
Registrar Abuse Contact Email: ab...@key-systems.net
Registrar Abuse Contact Phone: +49.68949396850
Domain Status: clientTransferProhibited
Registry Registrant ID:
Registrant Name: Alexander Siffrin
Registrant Organization: Key-Systems GmbH
Registrant Street: Im Oberen Werk 1
Registrant City: St. Ingbert
Registrant State/Province:
Registrant Postal Code: 66386
Registrant Country: DE
Registrant Phone: +49.68949396850
Registrant Phone Ext:
Registrant Fax: +49.68949396851
Registrant Fax Ext:
Registrant Email: bill...@key-systems.net
Registry Admin ID:
Admin Name: Alexander Siffrin
Admin Organization: Key-Systems GmbH
Admin Street: Im Oberen Werk 1
Admin City: St. Ingbert
Admin State/Province:
Admin Postal Code: 66386
Admin Country: DE
Admin Phone: +49.68949396850
Admin Phone Ext:
Admin Fax: +49.68949396851
Admin Fax Ext:
Admin Email: bill...@key-systems.net
Registry Tech ID:
Tech Name: Alexander Siffrin
Tech Organization: Key-Systems GmbH
Tech Street: Im Oberen Werk 1
Tech City: St. Ingbert
Tech Postal Code: 66386
Tech State/Province:
Tech Country: DE
Tech Phone: +49.68949396850
Tech Phone Ext:
Tech Fax: +49.68949396851
Tech Fax Ext:
Tech Email: bill...@key-systems.net
Name Server: ns1.p20.dynect.net
Name Server: ns2.p20.dynect.net
Name Server: ns3.p20.dynect.net
Name Server: ns4.p20.dynect.net
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2015-03-11T07:53:28.0Z <<<

Registry Billing ID:
Billing Name: Alexander Siffrin
Billing Organization: Key-Systems GmbH
Billing Street: Im Oberen Werk 1
Billing City: St. Ingbert
Billing State/Province:
Billing Postal Code: 66386
Billing Country: DE
Billing Phone: +49.68949396850
Billing Phone Ext:
Billing Fax: +49.68949396851
Billing Fax Ext:
Billing Email: bill...@key-systems.net

Reply via email to