|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Michael Tokarev (mjt
tls.msk.ru)Date: Thu May 02 2002 - 16:30:56 CDT
"Gary D. Margiotta" wrote:
>
> To chime in on this as well, in running reverse lookups for our analog
> reports, almost 65% of the hosts hitting one of the sites were
> unresolveable. This server receives over 50,000 distinct hosts requesting
> pages per day, and 65% of 50,000 is just around 35,000 hosts. That's a
> lot of damn hosts which don't resolve. And while they're mostly part of
> dhcp pools, just setting up a blanket reverse zone shouldn't be all that
> hard.
I looked to my http logs - yes, about the same numbers here: 65% of hosts
has no valid rDNS. But for *valid* email clients, the number is far less
than that. Here (and this is very specific to us), only about 3..5% of
legitimate smtp clients have no rDNS. Our smtpd rejects about 15% connection
attempts due to rDNS issues - most of them comes from various open proxies,
open relays (not used for normal mail operations), dialups and the like.
But again, YMMV. I know several folks tried to use reject_unknown_hostname
and turned it off because of too much legitimate mails broke.
[]
> Now, if you're a braindead sysadmin and don't know what a PTR record is,
> or how to set them up and administer them effectively, then that's a
> different story which requires severe beatings. Not knowing how to do it
> and not having the time to keep up with it are 2 totally different things.
>
> -Gary
>
> Running Windows is kinda like playing blackjack:
> User stays on success, reboots on failure
Most current commercial email (and other) software comes with an easy-to-use
and simple interface to set it up. A marketing term: "our software is very
easy to set up for non-expirienced user. Just insert this CD and it will
install and configure automatically". Now every cook is able to set up
a mail server and "configure" a DNS. C'est la vie, deal with that.
Regards,
Michael.
-
To unsubscribe, send mail to majordomo
postfix.org with content
(not subject): unsubscribe postfix-users
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]