4 ms·

Honestly, just block all everything except the traditional TLDs like .com, .net, etc. and country-code TLDs for countries you expect to interact with. It's a tr

Honestly, just block all everything except the traditional TLDs like .com, .net, etc. and country-code TLDs for countries you expect to interact with. It's a trivially easy way to greatly reduce the amount of junkmail you receive, and saves on compute resources too (since you can reject mail before it even hits your AV/anti-spam/etc. stack). In many years of doing this at work I think we've had to manually whitelist three domains (our corporate travel provider started sending from a .travel domain instead of their .com without telling us they would make that change...). I don't have numbers handy but it significantly reduced our junkmail intake.

theK 3y ago
Isn't that a bit like trying to predict who will want to talk with you? Maybe you are not in that sort of business but I constantly give out my email to people I meet at conferences and through that get Ham from pretty much any existing TLD, how do you cater for this case?
- waste_monk 3y ago
  We mainly deal with governments and other businesses in the same fairly small industry, so it's somewhat easier for us in that respect - we do know most of the entities who walk to talk to us in advance. Also, we have a good relationship with our staff and they're usually proactive about telling us when they're expecting mail coming in / we add a new supplier / etc. so we can keep an eye on mail delivery. There's always some mail that gets blocked, of course, but it's a relatively rare occurrence. Maybe in your case something that allows users to view and release their own quarantined mail [1] coupled with a healthy dose of training on spotting malicious emails and so on? [1] e.g. this sort of thing https://community.spiceworks.com/topic/2474067-office-365-by-default-allows-users-not-admin-to-view-release-quarantined-email https://community.spiceworks.com/topic/2474067-office-365-by... - not endorsing M365, just as an example.

theK 3y ago

Isn't that a bit like trying to predict who will want to talk with you? Maybe you are not in that sort of business but I constantly give out my email to people I meet at conferences and through that get Ham from pretty much any existing TLD, how do you cater for this case?

waste_monk 3y ago
We mainly deal with governments and other businesses in the same fairly small industry, so it's somewhat easier for us in that respect - we do know most of the entities who walk to talk to us in advance. Also, we have a good relationship with our staff and they're usually proactive about telling us when they're expecting mail coming in / we add a new supplier / etc. so we can keep an eye on mail delivery. There's always some mail that gets blocked, of course, but it's a relatively rare occurrence. Maybe in your case something that allows users to view and release their own quarantined mail [1] coupled with a healthy dose of training on spotting malicious emails and so on? [1] e.g. this sort of thing https://community.spiceworks.com/topic/2474067-office-365-by-default-allows-users-not-admin-to-view-release-quarantined-email https://community.spiceworks.com/topic/2474067-office-365-by... - not endorsing M365, just as an example.