<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Blocking top-level domains</TITLE>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 9.00.8112.16561"></HEAD>
<BODY style="FONT-SIZE: 12pt">
<DIV dir=ltr align=left><SPAN class=006555921-18072014><FONT color=#0000ff
size=2 face=Arial>I agree with Tracy and Kevin. I block those tlds that I don't
ever need to connect at exim level, what is the point of recieving the mail,
sending it to MailScanner and then discarding it after all that
work?</FONT></SPAN></DIV><BR>
<DIV dir=ltr lang=en-us class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Bryan
Laurila<BR><B>Sent:</B> Friday, July 18, 2014 1:47 PM<BR><B>To:</B>
mailscanner@lists.mailscanner.info<BR><B>Subject:</B> Blocking top-level
domains<BR></FONT><BR></DIV>
<DIV></DIV><!-- Converted from text/rtf format -->
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>I had an interesting situation
creep up on me this week where</FONT></SPAN><SPAN lang=en-us> <FONT
face=Calibri>I thought that something</FONT></SPAN><SPAN lang=en-us> <FONT
face=Calibri>was happening (or being processed)</FONT></SPAN><SPAN
lang=en-us><FONT face=Calibri> in</FONT></SPAN><SPAN lang=en-us> <FONT
face=Calibri>M</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>ail</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>S</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>canner</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>/SpamAssassin</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri> but
apparently</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>it
was</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri> not.</FONT></SPAN></P>
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>I have two mail relay scanners
running MailScanner & SpamAssa</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>s</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri>sin on Suse
Linux. These boxes scan</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri>
incoming mail</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri> for
spam</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>&
viruses</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>and</FONT></SPAN><SPAN
lang=en-us> <FONT face=Calibri>then</FONT></SPAN><SPAN lang=en-us> <FONT
face=Calibri>relay to my MS Exchange server. I had an influx of
spam</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>this
week</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>coming in from several
top-level domains that we wouldn</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri>’t</FONT></SPAN><SPAN lang=en-us> <FONT
face=Calibri>normally</FONT></SPAN><SPAN lang=en-us> <FONT face=Calibri>receive
any va</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri>li</FONT></SPAN><SPAN
lang=en-us><FONT face=Calibri>d emails from anyway, like .eu, .in, .asia, .club,
etc. </FONT></SPAN><SPAN lang=en-us> </SPAN></P>
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>Upon investigating the situation
I found that the Trend Micro Scan Mail service on my Exchange server crashed
which lead me to the discovery that MailScanner & SpamAssassin
weren</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri>’t filtering mail from
these unwanted top level domains as I thought and all that work was being done
by my e</FONT></SPAN><SPAN lang=en-us><FONT face=Calibri>x</FONT></SPAN><SPAN
lang=en-us><FONT face=Calibri>change server.</FONT></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>So, the question of the day
is… Where is the best place to turn on filtering or set a rule somehow to
filter unwanted top-level domains at the MailScanner/SpamAssassin
servers?</FONT></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>Like all things in IT there are
probably multiple ways of doing this so I am curious as to what others are
doing. All thoughts & comments</FONT></SPAN><SPAN lang=en-us><FONT
face=Calibri> are welcome.</FONT></SPAN></P>
<P dir=ltr><SPAN lang=en-us><FONT face=Calibri>Thanks!</FONT></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN><SPAN lang=en-us><FONT size=2 face="Times New Roman">Bryan S.
Laurila</FONT></SPAN><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN><SPAN lang=en-us><FONT size=2 face="Times New Roman">Senior
Network Support Analyst</FONT></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN><SPAN lang=en-us><FONT size=2 face="Times New Roman">Dickinson
County Healthcare System</FONT></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN><SPAN lang=en-us><FONT size=2 face="Times New Roman">1721
South Stephenson Avenue</FONT></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN><SPAN lang=en-us><FONT size=2 face="Times New Roman">Iron
Mountain, Michigan 49801</FONT></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN><SPAN
lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us><I></I></SPAN><SPAN
lang=en-us><I></I></SPAN><I><SPAN lang=en-us></SPAN></I><I><SPAN
lang=en-us><FONT size=1 face="Times New Roman">"Life begins at the end of your
comfort zone!"</FONT></SPAN></I></P>
<P dir=ltr><SPAN lang=en-us></SPAN><SPAN lang=en-us></SPAN></P>
<P dir=ltr><SPAN lang=en-us></SPAN></P><BR><STRONG><SPAN
style="FONT-SIZE: 9pt">Confidentiality Notice: </SPAN></STRONG><BR><BR><SPAN
style="FONT-SIZE: 8pt"><SPAN>This e-mail communication and any attachments may
contain confidential and privileged information for the use of the designated
recipients named above. If you are not the intended recipient, you are
hereby notified that you have received this communication in error and that any
review, disclosure, dissemination, distribution or copying of it or its contents
is prohibited. As required by federal and state laws, you need to hold
this information as privileged and confidential. <BR><BR>This message may
contain Protected Health Information (PHI). PHI is personal and sensitive
information related to a person's health care. It is being emailed to you
after appropriate authorization from the patient or under circumstances that do
not require patient authorization. You, the recipient, are obligated to
maintain it in a safe, secure and confidential manner. Re-disclosure
without additional patient consent or as permitted by law is prohibited.
Unauthorized re-disclosure or failure to maintain confidentiality could subject
you to penalties described in federal and state law. <BR><BR>If you are not the
intended recipient, or the employee or agent responsible to deliver it to the
intended recipient, you are hereby notified that any disclosure, copying or
distribution of this information is <STRONG>Strictly Prohibited</STRONG>.
If you have received this communication in error, please notify the sender and
destroy all copies of this communication and any attachments.</SPAN>
<BR><BR><SPAN style="FONT-SIZE: 7pt">Dickinson County Healthcare System, 1721 S.
Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org
</SPAN></SPAN></BODY></HTML>