this post was submitted on 08 Nov 2023
565 points (89.8% liked)

Technology

59982 readers
3902 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
 

The same threat actor has leaked larger amounts of data from LinkedIn dated 2023. They claim this new data contains 35M lines and is 12 GB uncompressed.

you are viewing a single comment's thread
view the rest of the comments
[–] CosmicCleric 3 points 1 year ago (1 children)

Be careful, my domain got on a whole bunch of ISP's spam lists because I had done the same thing.

They really don't like open domain email working.

[–] Styxia 2 points 1 year ago (1 children)

That’s annoying! It’s not been my experience, out of curiosity do you have any theories why your domain/aliases got blocked?

[–] CosmicCleric 1 points 1 year ago (1 children)

out of curiosity do you have any theories why your domain/aliases got blocked?

For my domain it was put on a spam list that various ISPs use.

When I spoke with one ISP they said it's because I had an open email address situation going, where a spammer can send a spam email out to a third party and on the reply address to they can make up anything as an email address for my domain name and it would be 'valid' because my domain email server was set up to receive all emails that you described.

And because of that I got put on a global spam list which many ISPs use. At the time I didn't even know about my domain being on the list, I just noticed a big drop in emails I was receiving.

FYI this happened over a decade ago, so I do not know if that is the current practice today. But better to make sure any email addresses to your domain that is not valid does not go through. No "catch all" bucket situation.

[–] chaospatterns 2 points 1 year ago* (last edited 1 year ago) (1 children)

That's not because you have a wildcard. That's because you need to implement DKIM, DMARC, and SPF records to prevent others from using your domain name to send mail.

MTAs use those standards to verify if somebody is permitted to send email for your domain. If you don't have those set then you can get what that ISP described.

[–] CosmicCleric 0 points 1 year ago (1 children)

That’s because you need to implement DKIM, DMARC, and SPF records to prevent others from using your domain name to send mail.

Well I used a third party service to host my domain, and as far as I can remember (like I said this was over a decade ago, maybe almost two decades), everything was set up correctly at that time.

Not trying to dispute what you said, but I can at least speak towards that as far as we knew at the time we had the domain set up correctly on our end, the stuff we could control.

The only thing is we had a catch-all bucket setting turned on for emails to be forwarded to an internal email address of our domain.

[–] [email protected] 1 points 1 year ago (1 children)

There has never been a correct way to deploy these services, just increasingly complex, featurefull, and or secure ways to do it

[–] CosmicCleric 1 points 1 year ago

There has never been a correct way to deploy these services, just increasingly complex, featurefull, and or secure ways to do it

You forgot one way.