Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by ziddoap on Tuesday March 25, 2025 @09:54AM
(#43471351)
How/why did you pick these 7?
Using your link: Ukraine, USA, UK, Brazil, & India all rank higher than Iran and Belarus. US & Ukraine rank higher than Nigeria and Romania.
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by edm0nd on Tuesday March 25, 2025 @11:25AM
(#43472466)
We (a US org) block all countries listed on the OFAC list
https://ofac.treasury.gov/sanctions-programs-and-country-inf...
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by kasey_junk on Tuesday March 25, 2025 @10:03AM
(#43471467)
Those countries likely have a higher chance of real traffic as well. If I’m doing business in Nigeria then obviously I can’t block it even if it ranks high on the threat level.
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by ziddoap on Tuesday March 25, 2025 @10:11AM
(#43471581)
Yes, obviously you don't block the countries you plan to do business with. I got that much.
It probably makes sense to leave the US out of the list, assuming the CableNinja is in North America.
The rest seems pretty arbitrarily chosen, though. JumpCrisscross gave no additional context to why they left out Ukraine, Brazil, India, UK, when picking countries from the list they linked. They have higher cybercrime index ranks.
Whether they have a higher chance of "real" traffic is highly dependent on the business in question.
I'm sure there is some amount of thought behind the choice, beyond just using the index, which is why I'm asking.
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by aftbit on Tuesday March 25, 2025 @10:54AM
(#43472105)
Let me throw out a guess: Ukraine is a wartime ally, Brazil is the seventh largest country in the world, India is the first, and the UK speaks English and has a lot of connections to USA.
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by JumpCrisscross on Tuesday March 25, 2025 @11:13AM
(#43472342)
They're each also popular IT outsourcing destinations who aren't sanctioned. You may not do business in Ukraine or Brazil, but chances are one of your customers or contractors do, and blocking those IPs isn't usually in the first or second swipe. (If you're blocking the UK and India, you're probably blocking all foreign IPs.)
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by CableNinja on Tuesday March 25, 2025 @07:33PM
(#43477230)
Pretty close tbh. Sub romania for brazil, and nigeria, for... i dont remember right now
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by throwaway2037 on Wednesday March 26, 2025 @01:42AM
(#43479195)
Romania!? I did a double-take, as it is a member of the European Union. I would think if their cyber-reputation was so terrible, there would be pressure from inside the EU to fix it.
Re:Spammers are better at SPF, DKIM, and DMARC than everyone...
by JumpCrisscross on Wednesday March 26, 2025 @07:50AM
(#43481165)
They’re a small economy with lots of hostile traffic, so while in the EU and not sanctioned like the rest of the bunch, I’ve commonly seen them on the chopping block.
Russia, China, Nigeria, Romania, North Korea, Iran and Belarus [1]?
[1] https://www.ox.ac.uk/news/2024-04-10-world-first-cybercrime-...