Am 17.09.26 um 22:00 schrieb William Kern via mailop:
I somewhat disagree.
They just sent one of my customers (who is a cloudflare customer) a notice
about a phish site on the origin server.
The report was confirmed and we disabled the site pending the customer fixing their old wordpress site they had
neglected.
The notice was from CloudFlare Trust and Safety and implied it was initiated
due to an abuse report.
That would work with well-behaved customers. Those who use the cloudflare shield for criminal activities will likely
respond with "thank you, we'll look into it" and wet their pants laughing after clicking the "send" button.
With Google and CloudFlare, don't expect cooperation when trying to stop criminal activities. I don't have much
experience with Telegram, but not much hope either.
Either try to convince law enforcement that a crime has happened (attempted fraud is a crime in Germany, for example, so
even without loss of money you can report it to police) and hope that they are knowledgeable enough to take effective
measures, or install filters that can detect this kind of fraud and at least protect your own users.
I have decided to not accept any SMTP connections from the Google cloud infrastructure (AS396982). Submission and SMTPS
connections can not really be blocked, as some users might utilize some cloud-hosted to access their mailbox, although
I'm considering a change of that policy as well. For other services, I use a system that combines multiple signals using
a rule engine.
Cheers,
Hans-Martin
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
