Re: Anyone else just blocking the ".top" TLD?

2016-11-05 Thread @lbutlr
On 05 Nov 2016, at 11:54, @lbutlr  wrote:
> 
> tad’s will be quite efferent

tld’s will be quite different

dunno what happened there.

Re: Anyone else just blocking the ".top" TLD?

2016-11-05 Thread @lbutlr
On 03 Nov 2016, at 10:27, Vincent Fox  wrote:
> XYZ insights anyone?  They have been on my reject list
> for a long time, but claim to be cleaning it up.  Thinking to
> drop my shields on this one.

I am still blocking most any TLDs via postfix:

/.*\.(com|net|org|edu|gov|ca|mx|de|dk|fi|uk|us|tv|info|biz|eu|es|il|it|nl|name|jp)$/
 DUNNO
/.*\.*/ 550 Mail for this TLD is not allowed

We get some (very little) real mail from info, biz, and name domains. All the 
other new domains are on a “prove you’re not terrible” status. So far the only 
one to graduated is .name.

(Of course your list of acceptable tad’s will be quite efferent, I’m sure. I 
don’t have users who get mail from France, for example).




Re: uceprotect issue

2016-11-05 Thread Joe Quinn

On 11/4/2016 11:03 AM, Dianne Skoll wrote:

On Fri, 4 Nov 2016 12:23:16 +0100
Holger Schramm  wrote:


If you don't like them, don't use their services. It is really that
easy.

It's not that easy.  If you provide email services to a large number
of people and someone they are trying to correspond with uses UCEPROTECT,
you are basically at the mercy of UCEPROTECT.  There's no accountability,
and your customers are not going to be interested in any sort of
discussion; they'll just want their damned emails to go through NOW.

Shady blocklists can cause all sorts of headaches as people with inadequate
spam filtering desperately use any and all blocklists available, regardless
of the collateral damage.


I trust _none_ of them. Do you know the people of any other blacklist?
Who assures you that there is not a crazy monkey in the background
doing some strange stuff with the listings? Nobody.

You are right.  I don't trust any blocklist.  But some of the bigger ones
such as SpamHaus seem to operate on a more professional and responsible
level than some of the crazier ones.

Regards,

Dianne.
I always look at the process, and part of it involves removing barriers 
to keeping the list accurate. Charging to be delisted faster says that 
when most people pay for delisting it's a money-making scheme. When most 
people don't pay, it says they are not prompt to delist false positives. 
Either way, the poor process makes their list suspect. As long as other 
lists like SpamHaus follow a process that operates for the good of the 
list, I'll happily use them.


https://en.wikipedia.org/wiki/The_Spamhaus_Project#Conflicts
And this is the benefit you get as an organization. You can get Google 
to budge, you can survive lawsuits and recover legal costs, and people 
who attack your network get arrested.