OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: RFC: DNS map for postfix?
From: Brad Knowles (blkskynet.be)
Date: Wed Sep 20 2000 - 09:57:21 CDT

At 9:10 AM -0400 2000/9/20, Wietse Venema wrote:

> I'd recommend listing the rbl domain name as part of the map name.
>
> smtpd_client_restrictions = ..., rbl:rbl.maps.vix.com, ...
>
> This gives finer control over things.

        I'd recommend getting away from the term "rbl" in this context.
The "RBL" is a very specific service operated by the Mail Abuse
Protection System (MAPS LLC), and Paul Vixie rightly gets rather
perturbed when people abuse this term.

        You could use the term "dnsbl", in that it is a black list that
is implemented via the DNS.

        Also, this implies that you have a per-blacklist method of
controlling what addresses mean what when they are returned by the
map. Right now, what postfix does is if there is anything returned
at all, it assumes that the address that was looked up is on the
blacklist, and it gets blocked. Finer-grained control is needed. 

--
   These are my opinions -- not to be taken as official Skynet policy
======================================================================
Brad Knowles, <blkskynet.be>                || Belgacom Skynet SA/NV
Systems Architect, Mail/News/FTP/Proxy Admin || Rue Colonel Bourg, 124
Phone/Fax: +32-2-706.13.11/12.49             || B-1140 Brussels
http://www.skynet.be                         || Belgium

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.