Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FPs due to dd.*\.kasserver\.com #17

Open
xrat opened this issue May 19, 2019 · 0 comments
Open

FPs due to dd.*\.kasserver\.com #17

xrat opened this issue May 19, 2019 · 0 comments

Comments

@xrat
Copy link

xrat commented May 19, 2019

I have only recently started to use fqrdns.pcre and quickly found some domains/senders causing FPs due to

/^dd[1-9][0-9]{3,5}\.kasserver\.com$/ REJECT Generic - Please relay via ISP (kasserver.com)

In many if not all cases the IP addresses + the FQrDNS names have been stable over the course of several months (I checked my logs since January 2019). The domains with the highest volumes are

seiteanseite.at 85.13.147.26 dd28616.kasserver.com
wohlrab.at 85.13.145.46 dd26118.kasserver.com
mailman.pxldsk.com 85.13.153.66 dd36426.kasserver.com
kindertheater.com 85.13.145.208 dd26926.kasserver.com
drehbuchforum.at 85.13.133.140 dd10926.kasserver.com
fluglaerm.at 85.13.152.9 dd34912.kasserver.com
concordia.at 85.13.130.23 dd3712.kasserver.com

EDIT: Found not just 2 but several more FPs.

@xrat xrat changed the title 2 FPs due to dd.*\.kasserver\.com FPs due to dd.*\.kasserver\.com May 19, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant