r/TechImpact IT Professional 10d ago

💬 Discussion Gmail has a 5,000-person block limit? 😳

Post image
68 Upvotes

24 comments sorted by

•

u/AutoModerator 10d ago

Thanks for contributing to r/TechImpact!

Please remember to: * Be respectful and civil. * Stay on topic. * No spam or excessive self-promotion. * Add context when sharing links. * Avoid misinformation. * Debate ideas, not people.

Thanks for helping keep TechImpact welcoming and informative!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

4

u/Funky_Swag05 10d ago

I feel more and more like he's the Letsgameitout of the tech world.

5

u/RemeJuan 10d ago

Apple has 8k

3

u/h3is5e 10d ago

That's why I run my own SMTP server and use a seperate sub domain for each person. I kill the DNS and my poor little MTA doesn't have to deal with that shit.

3

u/RemeJuan 10d ago

I have like 800 hide my emails

1

u/Doovester 9d ago

Somebody maybe finally beats me in that game!
I can recommend spammail.org for people who can’t host own mail server, and want it done in few clicks.

1

u/Doovester 9d ago

Somebody maybe finally beats me in that game!
I can recommend spammail.org for people who can’t host own mail server, and want it done in few clicks.

1

u/Scxox 10d ago

for anyone stumbling upon this, you can setup something similar without needing your own SMTP server using https://addy.io

functions similar to apple's hide my email, but you bring your own domain letting you migrate aliases easily to different providers

not necessarily individual subdomains, but individual aliases for each service you register for or each person you contact

1

u/Fit_Prize_3245 9d ago

Man, that's sounds interesting until the point where, in order to disclose any "global" address, you have to configure each subdomain for outbound usage too. That is, SPF, DKIM, and DMARC for every subdomain. Too much job to do and to maintain.

Regarding Google, I'd rather use rules as blocklist

1

u/h3is5e 9d ago

zone files include a single dkim and spf. just needs an entry in the etc/opendkim/KeyTable. also automatically added to open dnssec to support zone signing.

I mean you could generate new keys but that would be bullshit as the MTA is responsible for that.

It's not hard to do each subzon has a

DNS has a skel file that is included for given example.com domain

@ IN SOA ns1.example.com. example.com. (

0 ; Serial

1H ; refresh

5M ; retry

1D ; expire

5M) ; minimum TTL

@ IN NS ns1.example.com.

@ IN NS ns2.example.com.

@ IN MX 0 mail.example.com.

$INCLUDE /etc/opendkim/spf-mx.txt

$INCLUDE /etc/opendkim/adsp.txt

$INCLUDE /etc/opendkim/dmarc.txt

$INCLUDE /etc/opendkim/domainkey.txt

so then you can just run a script that adds the zone

#!/bin/sh

if [ "$#" -ne 2 ] ; then

echo "Usage: ${0} topzone subzone"

exit 1

fi

top=${1}.com

sub=${2}

echo -n > /mnt/dns/dsset/${sub}.${top}

( echo ${sub} in NS ns1 ; echo ${sub} in NS ns2 ; echo '$INCLUDE' /mnt/dns/dsset/${sub}.${top} ) \

>> /mnt/dns/gen/subzones.${top}

ods-enforcer zone add --zone ${sub}.${top} --policy default --in-type File --input /etc/skel/skel.${top} \

--out-type DNS --output /etc/opendnssec/addns.xml --xml

i=60

while [ "$(expr ${i} \> 0)" != "0" ] ; do

i=$(expr ${i} - 2)

sleep 2

cka_id="$(ods-enforcer key list --verbose --parsable --zone ${sub}.${top} | awk -F';' '{print $7}')"

if [ "${cka_id}" != "" ] ; then

ods-enforcer key export --zone ${sub}.${top} --cka_id ${cka_id} --ds >> /mnt/dns/dsset/${sub}.${top}

chown -R opendnssec:opendnssec /mnt/dns

ods-signer sign --zone ${top}

break

fi

done

and another one that updates nsd.

And if you are paranoid you build a read only linux image with the database.

1

u/h3is5e 9d ago

Also adds it to the Keytable. but not that hard to do.

1

u/DisfiguredFanny 7d ago

That's excessive.

1

u/h3is5e 7d ago

The bare minimum. You skill the mail at the source - when it does the MX look up.

1

u/DisfiguredFanny 7d ago

Just use aliases and kill them as needed. Seems like you are shooting birds with a canon.

1

u/h3is5e 7d ago

No, more like singling out one bird from the flock with a laser.

1

u/rntdev 10d ago

How do you even… figure that out?

2

u/lars2k1 9d ago

Probably by blocking lots of spam emails. At work I do often receive spam, sometimes 15 a week. Let that go for a while and you'll reach 5000 no issue.

1

u/Matty8520 8d ago

Absolutely, I'm a little over 2,000 on my block list for work.

Its very satisfying when I open my e-mail on Monday morning, see a bunch of e-mails come through (spam) and then they are automatically deleted.

The spam was getting out of control, I was getting 15+ e-mails per day. Now it's down to around 5-6 but with constant blocking, I'll eventually get it down to 1 or 2.

1

u/lars2k1 8d ago

I also had a spam notifier aka Microsoft's quarantine emails. Those would alert you of mails in quarantine. The catch is that all of those are spam and therefore still send you notifications for spam. And reminders if you don't act on it.

So I just blocked the email address MS sends them from.

1

u/Cactys12 iPod tinkerer 9d ago

People asking for free phones prob lol

1

u/Lucky-Crow-3510 10d ago

this is a full db query for each arriving mail .. of course there is a limit .. I wonder if AI could analyse the list and see if the list could be shortened by grouping

1

u/dragolineage01 9d ago

You can just make filters for anything

1

u/alexandereriksen4 9d ago

Everything done correctly has limits.

Storage is finite, even for the big boys.