justina colmena ~biz
2022-Feb-12 13:04 UTC
Re: Sv: Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
The ".top" TLD is popular among Russian spammers, ".ru" is a little too obvious and honest for what it is, unless that's part of Biden's sanctions, the others you mention look like vice domains, but looking at GitHub: * https://github.com/dovecot There's an "Oy" which is a Finnish "osalliyhdistys" and a ".fi" -- I have not heard of recent hostility between Finland and Russia, notwithstanding the Ukraine situation. Your mail client is all configured in Swedish, but Sweden & Finland are not officially part of NATO, AFAIK, and Sweden has its own currency whereas Finland did give up the markka in exchange for the Euro some 20-odd years ago I don't recall. On February 12, 2022 2:58:03 AM AKST, Sebastian Nielsen <sebastian at sebbe.eu> wrote:>Thats a TLD ban. Meaning *.ru is banned. > >same applies for my domain for example, I ban *.xyz, *.date and a few others. > >-----Ursprungligt meddelande----- >Fr?n: dovecot-bounces at dovecot.org <dovecot-bounces at dovecot.org> F?r Lev Serebryakov >Skickat: den 12 februari 2022 12:08 >Till: dovecot at dovecot.org >?mne: Re: Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC > >On 11.02.2022 16:31, Marc wrote: > > (sorry for posting to list this, but I don't have any ways to contact Marc off-list now) > >>> >>> Problem is, I need to unpack each of them to be sure, that these >>> are false positives and I'm afraid, that it could lower reputation of >>> my mail server IP address with major providers (like Google Mail). >>> >> >> How can you get a lower reputation? Afaik dmarc is just signing your outgoing messages. > Marc, my domain already has problems sending mail to you, for example: > ><Marc at f1-outsourcing.eu>: host spam1.roosit.eu[212.26.193.45] said: 553 5.3.0 > 550We have blocked this toplevel because of spam. Use another toplevel > until the maintainer has resolved these issues (in reply to MAIL FROM > command) > >-- >// Black Lion AKA Lev Serebryakov >-- Sent from my Android device with K-9 Mail. Please excuse my brevity. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20220212/5aa5be89/attachment.htm>
Sebastian Nielsen
2022-Feb-12 13:24 UTC
Sv: Sv: Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
Yep. Its a lot of TLDs that is banned at me, but I haven?t had any problems with
.ru so .ru isn?t yet banned.
Here is my TLD banlist:
deny
message = 5.7.1 Banned TLD where sending IP is not listed on DNSWL (
https://www.dnswl.org/selfservice/?action=register )
condition = ${if eq {$acl_m4}{dnswl_whitelisted}{no}{yes}}
sender_domains =
^(?i).*\\.(accountant|accountants|asia|auto|berlin|bid|buzz|camera|car|cam|cars|christmas|click|club|college|computer|country|cricket|date|design|download|exposed|email|fail|faith|fit|fun|gdn|global
|guru|help|host|jetzt|kim|icu|life|live|link|loan|london|media|men|mom|news|ninja|online|party|photography|pro|protection|pub|racing|realtor|reise|ren|rent|rest|review|rocks|science|security
|shop|site|solutions|space|storage|store|stream|study|surf|tech|technology|theatre|today|top|trade|university|uno|us|viajes|vip|vividal|wang|webcam|website|win|work|works|world|xin|xyz|zip|xn--.*)\$
This crap that ICANN started with ?custom? TLDs is of more harm than useful. So
much spam TLDs in the registry.
Fr?n: dovecot-bounces at dovecot.org <dovecot-bounces at dovecot.org> F?r
justina colmena ~biz
Skickat: den 12 februari 2022 14:06
Till: dovecot at dovecot.org
?mne: Re: Sv: Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
The ".top" TLD is popular among Russian spammers, ".ru" is a
little too obvious and honest for what it is, unless that's part of
Biden's sanctions, the others you mention look like vice domains, but
looking at GitHub:
* https://github.com/dovecot
There's an "Oy" which is a Finnish "osalliyhdistys" and
a ".fi" -- I have not heard of recent hostility between Finland and
Russia, notwithstanding the Ukraine situation. Your mail client is all
configured in Swedish, but Sweden & Finland are not officially part of NATO,
AFAIK, and Sweden has its own currency whereas Finland did give up the markka in
exchange for the Euro some 20-odd years ago I don't recall.
On February 12, 2022 2:58:03 AM AKST, Sebastian Nielsen <sebastian at
sebbe.eu <mailto:sebastian at sebbe.eu> > wrote:
Thats a TLD ban. Meaning *.ru is banned.
same applies for my domain for example, I ban *.xyz, *.date and a few others.
-----Ursprungligt meddelande-----
Fr?n: dovecot-bounces at dovecot.org <mailto:dovecot-bounces at
dovecot.org> <dovecot-bounces at dovecot.org <mailto:dovecot-bounces
at dovecot.org> > F?r Lev Serebryakov
Skickat: den 12 februari 2022 12:08
Till: dovecot at dovecot.org <mailto:dovecot at dovecot.org>
?mne: Re: Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
On 11.02.2022 16:31, Marc wrote:
(sorry for posting to list this, but I don't have any ways to contact Marc
off-list now)
Problem is, I need to unpack each of them to be sure, that these
are false positives and I'm afraid, that it could lower reputation of
my mail server IP address with major providers (like Google Mail).
How can you get a lower reputation? Afaik dmarc is just signing your outgoing
messages.
Marc, my domain already has problems sending mail to you, for example:
<Marc at f1-outsourcing.eu <mailto:Marc at f1-outsourcing.eu> >:
host spam1.roosit.eu[212.26.193.45] said: 553 5.3.0
550We have blocked this toplevel because of spam. Use another toplevel
until the maintainer has resolved these issues (in reply to MAIL FROM
command)
--
// Black Lion AKA Lev Serebryakov
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://dovecot.org/pipermail/dovecot/attachments/20220212/1e79faff/attachment.htm>