On Thu, 22 Apr 2021, Axb wrote:

On 4/22/21 4:07 AM, John Hardin wrote:

Prompted by seeing this sort of thing in SA Users List spams:

   Unsubscribe
   https://u21002357.ct.sendgrid.net/asm/unsubscribe/?mumblemumble

Should we add "util_rb_3tld ct.sendgrid.net" so that maybe URIBL could help out with catching abusive sendgrid accounts?


dirt is shared with legit users - too risky

For all of sendgrid, agreed. But isn't that four-part feedback hostname specific to a given sendgrid account? The hostname part matches the account number in the envelope from, which is already being used to detect abusive sendgrid accounts.

 Return-Path: <[email protected]>

I'm suggesting a potential mechanism to focus on the account number part of that URL, not on punishing sendgrid as a whole...

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]                         pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79

Reply via email to