Re: [PLUG] spamassassin help: create a rule to score by sender TLD

Charlie Li <ml+PLUG@vishwin.info> · Wed, 19 Oct 2016 00:20:40 -0400

On 18/10/16 13:42, ac wrote:
>> If you've done something similar, are there other problematic domains 
>> that seem to generate a lot of spam and are unlikely to house
>> legitimate mail senders?  I will stay away from the country-based
>> ones because we do get mail from foreign contacts.  It's more the new
>> TLDs I'm worried about... .xyz is another one I noticed and would
>> probably score.
>>
> I would not do this in that way as there may be legit domains @ .xyz
> or .top and your users (if you are a hosting co) may/will complain
> about dropping legit email...
> 
Indeed. I recently registered a .xyz myself and will be used for my
upcoming business. I know a few people who also use .xyz as their
personal domain for their website and of course email.
> best way to stop spam is still the dnsbl, like SpamCop.net &
> superblock.ascams.com & spamhaus/org etc etc
> 
Exactly.

Furthermore, probably the easiest and most fruitful way to avoid getting
spam at all (before it hits any filters or daemons you set up) is to
just not post the raw email address anywhere on the web. Have obfuscated
JavaScript generate the string instead, or use HTML/CSS's built-in
right-to-left functionality to display it if you absolutely positively
need to display the raw address.

-- 
Charlie Li
Can't think of a witty .sigline today…

(This email address is for mailing list use only;
replace local-part with vishwin for off-list communication)