Quoting Jim Ramsay (i(_dot_)am(_at_)jimramsay(_dot_)com):
John Capo wrote:
Quoting Kenneth Porter (shiva(_at_)sewingwitch(_dot_)com):
Since throwaway spammer domains often use common nameservers, perhaps
that can be leveraged to identify the throwaways, by doing the extra NS
lookup.
I've been doing that for about a month and it is very productive.
I'm interested - how have you been doing this?
Postfix, is there any other MTA to use, has a restriction that will
reject based on name servers for the envelope domain. The restriction
is only available in fairly recent snapshots.
check_sender_ns_access = some-map-type:/some-path-to-file
I have a huge list of spammer domains that the envelope sender is
checked against. I started adding spammer name servers to that
list. I check the list for the envelope domain and the envelope
domain name servers. Every few days I process the logs and add
domains to the list that are using name servers in the list. Now
I have the domain and the name servers listed.
John Capo
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/draft-mengwong-spf-02.9.4.txt
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡