OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bill Arlofski (waahotchkiss.org)
Date: Mon Sep 10 2001 - 21:40:17 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi Michael... I can tell you that 'peel.net' is either a spam or other
    non-rfc-compliant, BS site. First hint is when you look at their domain
    MX records. For one, they only have ONE MX record (which is NOt a crime
    of course), but it looks like this:

    peel.net preference = 10, mail exchanger = returns.peel.net

    Hmmm, RETURNS.peel.net? Nice hostname since it defines the ONLY type
    of mail that anyone might ever want to send to them!

    Then, to make sure they never hear your complaint of spam or bounce
    messages to other undeliverable BS they send, they do this:

    [waapokey waa]$ telnet returns.peel.net 25
    Trying 199.249.167.26...
    telnet: Unable to connect to remote host: Connection timed out

    Yeah... THAT's a nice Internetizen... grrr. (hey.... I think I need to
    trademark that! Internetizen(tm) ) <grin>

    I have been watching this for a while now. There is NO way to send these
    poeple bounce messages. I have not had the time, but tomorrow they are
    going in my list of sites to simply drop connections from. Not sure yet
    if I am going to block them at the PIX firewall, or at my mail server
    with ipchains, but one thing is for sure - They won't be bothering my
    users any longer, nor will they be bothering me nor my logs files any
    longer. :-/

    In this case, the issue is not at your end Michael, but unfortunately,
    the problem is; in the case of 'peel.net' at least.

    The problems with deliveries to msn users that you are seeing is (from
    what I have gathered on the qmail support list) a problem with
    non-compliant DNS servers serving up the MX records for the msn domain.
    A suggested 'band-aide' there was to dig the zone for mx records pick
    one, and set up an smptroute. That is point ALL email destined for
    msn.com to ONE of their mail servers (by IP address), and watch it work
    until msn changes server IPs. :)

    Hope this helps.

    > Feel free to correct me and tell me
    > that all these sites are down. I will wrap myself in bliss and pass out
    > from relief. =)
    >
    > Michael Doughty
    >
    >
    > EAD4A10943 1606 Thu Sep 6 13:14:10 (MAILER-DAEMON)
    > (connect to returns.peel.net: Connection refused)
    > rootpeel.net
    >
    > 94DAE10A4C 1650 Fri Sep 7 15:19:58 (MAILER-DAEMON)
    > (connect to returns.peel.net: Connection refused)
    > rootpeel.net

    -- 
    

    ------------- Bill Arlofski Unix Systems Administrator The Hotchkiss School waahotchkiss.org 860-435-3140

    The more I want to get something done, the less I call it work. -- Richard Bach, "Illusions"

    - To unsubscribe, send mail to majordomopostfix.org with content (not subject): unsubscribe postfix-users