OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Tokarev (mjttls.msk.ru)
Date: Thu May 02 2002 - 16:30:56 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    "Gary D. Margiotta" wrote:
    >
    > To chime in on this as well, in running reverse lookups for our analog
    > reports, almost 65% of the hosts hitting one of the sites were
    > unresolveable. This server receives over 50,000 distinct hosts requesting
    > pages per day, and 65% of 50,000 is just around 35,000 hosts. That's a
    > lot of damn hosts which don't resolve. And while they're mostly part of
    > dhcp pools, just setting up a blanket reverse zone shouldn't be all that
    > hard.

    I looked to my http logs - yes, about the same numbers here: 65% of hosts
    has no valid rDNS. But for *valid* email clients, the number is far less
    than that. Here (and this is very specific to us), only about 3..5% of
    legitimate smtp clients have no rDNS. Our smtpd rejects about 15% connection
    attempts due to rDNS issues - most of them comes from various open proxies,
    open relays (not used for normal mail operations), dialups and the like.
    But again, YMMV. I know several folks tried to use reject_unknown_hostname
    and turned it off because of too much legitimate mails broke.

    []
    > Now, if you're a braindead sysadmin and don't know what a PTR record is,
    > or how to set them up and administer them effectively, then that's a
    > different story which requires severe beatings. Not knowing how to do it
    > and not having the time to keep up with it are 2 totally different things.
    >
    > -Gary
    >
    > Running Windows is kinda like playing blackjack:
    > User stays on success, reboots on failure

    Most current commercial email (and other) software comes with an easy-to-use
    and simple interface to set it up. A marketing term: "our software is very
    easy to set up for non-expirienced user. Just insert this CD and it will
    install and configure automatically". Now every cook is able to set up
    a mail server and "configure" a DNS. C'est la vie, deal with that.

    Regards,
     Michael.
    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users