.net or .com? 163.com and 126.com are Netease, a big Chinese ISP. We've only ever gotten a single daily aggregate report from them.
-- D On Fri, Aug 10, 2012 at 11:43 AM, Menotti Minutillo, Jr. < [email protected]> wrote: > Yeah.net > 163.net > 126.net > > They come in on the order of minutes or sometimes seconds. Seem like bogus > domains to me anyway. Maybe better to black hole them. > On Aug 10, 2012 11:33 AM, "Roland Turner" <[email protected]> > wrote: > >> How long are the intervals for the domains in question? (Which domains?) >> >> - Roland >> >> >> On 08/10/2012 07:35 PM, Menotti Minutillo, Jr. wrote: >> >> Yeah, it seems to be a few troublesome domains. >> On Aug 10, 2012 3:02 AM, "Roland Turner" <[email protected]> >> wrote: >> >>> Are you certain that that is what is happening? >>> >>> I've observed previously (I don't know whether this is still true) that >>> gmail's aggregate report sender is a little impatient: an issue in our >>> environment was causing ~30s delays in SMTP DATA responses occasionally, >>> which led to a subsequent repeat delivery of the same message. >>> >>> Are you sure that you are seeing reports for a shorter interval than 24 >>> hours? (vs. repeat sends and/or separate reports for separate [clusters of] >>> servers?) Are the timestamps inside the report for an interval shorter than >>> 24 hours? >>> >>> - Roland >>> >>> >>> >>> >>> On 08/09/2012 03:26 AM, Menotti Minutillo, Jr. wrote: >>> >>> Thanks, I am not using the ri tag but still some folks dont honor it. >>> >>> On Wed, Aug 8, 2012 at 2:48 PM, Franck Martin <[email protected]>wrote: >>> >>>> Menotti, >>>> >>>> The default is daily reports. If you don't specify a different >>>> reporting time, this is what you should have, but it is up to the receiver >>>> to follow your requested schedule or not. >>>> >>>> From: "<Menotti Minutillo>", "Jr." <[email protected]> >>>> Date: Wednesday, August 8, 2012 11:38 AM >>>> To: "[email protected]" <[email protected]> >>>> Subject: [dmarc-discuss] Aggregate report spam >>>> >>>> Hi - when in monitor only mode, is there a way in a DMARC record to >>>> ask to suppress everything but daily aggregates? Hourly isn't >>>> really necessary for my use case and can be a bit spammy. >>>> >>>> -- >>>> Menotti Minutillo >>>> >>> >>> >>> >>> -- >>> Menotti Minutillo >>> >>> >>> _______________________________________________ >>> dmarc-discuss mailing >>> [email protected]http://www.dmarc.org/mailman/listinfo/dmarc-discuss >>> >>> NOTE: Participating in this list means you agree to the DMARC Note Well >>> terms (http://www.dmarc.org/note_well.html) >>> >>> >>> -- >>> Roland Turner | Director, Labs >>> TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693 >>> Mobile: +65 96700022 | Skype: roland.turner >>> [email protected] | http://www.trustsphere.com/ >>> >>> >> -- >> Roland Turner | Director, Labs >> TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693 >> Mobile: +65 96700022 | Skype: roland.turner >> [email protected] | http://www.trustsphere.com/ >> >> > _______________________________________________ > dmarc-discuss mailing list > [email protected] > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) > > -- David Romerstein | LivingSocial | Lead Engineer - MTA Operations | www.livingsocial.com
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
