Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Subject: Re: Anyone else just blocking the ".top" TLD?
To: users@spamassassin.apache.org
References: <56F88FC6.6020406@camerontech.com>
 <4C4D0E94-644E-44F5-A8A1-0868808F1F3E@billmail.scconsult.com>
 <56F90634.1090001@thelounge.net> <56F9D46C.10106@camerontech.com>
 <BY2PR0801MB16075E1EB568A2E0B4E0C482BA6E0@BY2PR0801MB1607.namprd08.prod.outlook.com>
 <0A8822BD-19DA-4F74-833E-81206466C0B3@kreme.com>
 <bc08f6b83bb38c3ffdae9287ff3e229d@homenet.lan>
From: Reindl Harald <h.reindl@thelounge.net>
Openpgp: id=13540402D67A7F71C6E974EA866063CF7F780279;
 url=https://arrakis.thelounge.net/gpg/h.reindl_thelounge.net.pub.txt
Organization: the lounge interactive design
Message-ID: <eb1c6d78-2c4e-661b-14ff-409c5fa95c5f@thelounge.net>
Date: Tue, 26 Apr 2016 11:55:46 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.0
MIME-Version: 1.0
In-Reply-To: <bc08f6b83bb38c3ffdae9287ff3e229d@homenet.lan>
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="GAIVe0X4f1vHKaBdqHvL80fBH8jpcskFD"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--GAIVe0X4f1vHKaBdqHvL80fBH8jpcskFD
Content-Type: multipart/mixed; boundary="Md6iGxX10H6RrafRPrFusHn1T9Hl3W8Nm"
From: Reindl Harald <h.reindl@thelounge.net>
To: users@spamassassin.apache.org
Message-ID: <eb1c6d78-2c4e-661b-14ff-409c5fa95c5f@thelounge.net>
Subject: Re: Anyone else just blocking the ".top" TLD?
References: <56F88FC6.6020406@camerontech.com>
 <4C4D0E94-644E-44F5-A8A1-0868808F1F3E@billmail.scconsult.com>
 <56F90634.1090001@thelounge.net> <56F9D46C.10106@camerontech.com>
 <BY2PR0801MB16075E1EB568A2E0B4E0C482BA6E0@BY2PR0801MB1607.namprd08.prod.outlook.com>
 <0A8822BD-19DA-4F74-833E-81206466C0B3@kreme.com>
 <bc08f6b83bb38c3ffdae9287ff3e229d@homenet.lan>
In-Reply-To: <bc08f6b83bb38c3ffdae9287ff3e229d@homenet.lan>

--Md6iGxX10H6RrafRPrFusHn1T9Hl3W8Nm
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable


Am 26.04.2016 um 11:23 schrieb Heinrich Boeder:
> Hi,
>
>> On Apr 21, 2016, at 3:43 PM, Vincent Fox <vbfox@ucdavis.edu> wrote:
>>> Recently seeing increase in spam from these gTLD:
>>>
>>> pro
>>> bid
>>> trade
>
> I didn=C2=B4t see any spam from .pro, .bid or .trade gTLDs either. I wa=
s just
> wondering if it doesn=C2=B4t make more sense to just give those domains=
 a
> higher score in SA instead of blocking them right away with a MTA based=

> REJECT Policy

just enforce SPF in the MTA with a clear reject message as first step

we do do that for all new gTLDs for a long time now automated by fetch=20
current list from IANA every 24 hours and write MTA configs

  check_policy_service unix:private/spf-policy
  check_sender_access proxy:pcre:/etc/postfix/blacklist_tld.cf


--Md6iGxX10H6RrafRPrFusHn1T9Hl3W8Nm--

--GAIVe0X4f1vHKaBdqHvL80fBH8jpcskFD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlcfOyIACgkQhmBjz394AnkwNwCfbbFt/+6IvhpfR97aAqLlnXUw
vEsAnjvKtmNupUJMQkLRauJzJHGsikmN
=bsnL
-----END PGP SIGNATURE-----

--GAIVe0X4f1vHKaBdqHvL80fBH8jpcskFD--