Re: block 'new style' TLDs ?

2019-11-18 Thread John Schmerold
On 11/18/2019 7:46 AM, @lbutlr wrote: On 18 Nov 2019, at 06:04, Andrew Sullivan wrote: At the same time, there are a _lot_ of anti-abuse techniques for mail that don't rely on the broad hueristic of, "This TLD seems to suck,” and that don't rely on establishing that rule as a permanent part o

Re: block 'new style' TLDs ?

2019-11-18 Thread @lbutlr
On 18 Nov 2019, at 06:04, Andrew Sullivan wrote: > At the same time, there are a _lot_ of anti-abuse techniques for mail that > don't rely on the broad hueristic of, "This TLD seems to suck,” and that > don't rely on establishing that rule as a permanent part of your > configuration. Yeah, but

Re: block 'new style' TLDs ?

2019-11-18 Thread Andrew Sullivan
Hi, On Mon, Nov 18, 2019 at 01:11:22PM +0200, George Papas wrote: > this still works : > > https://www.davidmartinwhite.com/2016/10/25/fighting-spam-block-entire-ttld-with-postfix/ > To be clear, I believe in, "Your network, your rules." Each operator should do what s/he wants. At the same ti

Re: block 'new style' TLDs ?

2019-11-02 Thread Kevin A. McGrail
On 11/2/2019 2:38 PM, John Schmerold wrote: > On 10/24/2019 12:32 AM, @lbutlr wrote: >> On 23 Oct 2019, at 15:20, lists wrote: >>> /\.asia$/ 510 Denied: Unacceptable TLD .asia >> [Long list… removed] >> >> smtpd_helo_restrictions = reject_invalid_helo_hostname >> check_helo_access pcre:/etc/

Re: block 'new style' TLDs ?

2019-11-02 Thread John Schmerold
On 10/24/2019 12:32 AM, @lbutlr wrote: On 23 Oct 2019, at 15:20, lists wrote: /\.asia$/ 510 Denied: Unacceptable TLD .asia [Long list… removed] smtpd_helo_restrictions = reject_invalid_helo_hostname check_helo_access pcre:/etc/postfix/helo_checks.pcre permit /etc/postfix/helo_checks.pcr

Re: block 'new style' TLDs ?

2019-11-02 Thread John Schmerold
On 10/24/2019 4:46 AM, Jaroslaw Rafa wrote: Dnia 23.10.2019 o godz. 23:32:44 @lbutlr pisze: /etc/postfix/helo_checks.pcre: /.*\.(com|net|org|edu|gov|ca|mx|de|dk|fi|fr|uk|us|tv|info|biz|eu|es|il|it|nl|name|jp|host|au|nz|ch|tv)$/ DUNNO /.*\.*$/ 550 Mail to or from this TLD is not allowed And thu

Re: block 'new style' TLDs ?

2019-10-24 Thread @lbutlr
On 24 Oct 2019, at 04:10, Fourhundred Thecat <400the...@gmx.ch> wrote: > On 24/10/2019 07.32, @lbutlr wrote: >> On 23 Oct 2019, at 15:20, lists wrote: >>> >>> /\.asia$/ 510 Denied: Unacceptable TLD .asia >> >> [Long list… removed] >> >> smtpd_helo_restrictions = reject_invalid_helo_hostname >>

Re: block 'new style' TLDs ?

2019-10-24 Thread Fourhundred Thecat
On 24/10/2019 07.32, @lbutlr wrote: > On 23 Oct 2019, at 15:20, lists wrote: >> >> /\.asia$/ 510 Denied: Unacceptable TLD .asia > > [Long list… removed] > > smtpd_helo_restrictions = reject_invalid_helo_hostname > check_helo_access pcre:/etc/postfix/helo_checks.pcre permit > > /etc/postfix/hel

Re: block 'new style' TLDs ?

2019-10-24 Thread Jaroslaw Rafa
Dnia 23.10.2019 o godz. 23:32:44 @lbutlr pisze: > > /etc/postfix/helo_checks.pcre: > /.*\.(com|net|org|edu|gov|ca|mx|de|dk|fi|fr|uk|us|tv|info|biz|eu|es|il|it|nl|name|jp|host|au|nz|ch|tv)$/ > DUNNO > /.*\.*$/ 550 Mail to or from this TLD is not allowed And thus you for example would reject all e

Re: block 'new style' TLDs ?

2019-10-23 Thread @lbutlr
On 23 Oct 2019, at 15:20, lists wrote: > > /\.asia$/ 510 Denied: Unacceptable TLD .asia [Long list… removed] smtpd_helo_restrictions = reject_invalid_helo_hostname check_helo_access pcre:/etc/postfix/helo_checks.pcre permit /etc/postfix/helo_checks.pcre: /.*\.(com|net|org|edu|gov|ca|mx|de|

Re: block 'new style' TLDs ?

2019-10-23 Thread lists
23, 2019 1:49 PM To: postfix-users@postfix.org Subject: Re: block 'new style' TLDs ? I've had the same problem for some time. I put the following into access_helo and header_checks. It's pretty severe (and the list gets bigger every month) but the percentage of valid emai

Re: block 'new style' TLDs ?

2019-10-23 Thread miim
I've had the same problem for some time. I put the following into access_helo and header_checks. It's pretty severe (and the list gets bigger every month) but the percentage of valid email coming from those domains is next to nil. I use a 510 rather than a 554 reject so hopefully they won't try

Re: block 'new style' TLDs ?

2019-10-23 Thread Ralph Seichter
* li...@sbt.net.au: > what's the best way to block that, block entire '*.best' ? > how and where ? See http://www.postfix.org/ADDRESS_VERIFICATION_README.html . You can for example use /\.best$/ REJECT in a PCRE style sender access file to match envelope sender addresses. -Ralph