OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Victor.Duchovni_at_morganstanley.com
Date: Mon Dec 02 2002 - 18:59:45 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Tue, 3 Dec 2002, Colin Campbell wrote:

    > Hi,
    >
    > On Mon, 02 Dec 2002 16:53:24 +0100
    > Matthias Andree <madt.e-technik.uni-dortmund.de> wrote:
    >
    > > "nearest" in Wietse's logs might mean this, but I didn't check; it makes
    > > some sense because backup MX often enough do not know what users are
    > > acceptable, but blindly accept the whole domain -- and bounce later.
    >
    > There's something that is bugging me about these checks. What happens when the
    > MX returns 127.0.0.1? Will postfix, sending to "itself" accept all mail? I ask
    > because there are a (growing?) number of domains from which we receive "mail"
    > where the MX for that domain returns 127.0.0.1.
    >

    It would be better to reject such mail because of the invalid MX records
    rather than the failure of the probe. This has been discussed before, I
    think someone suggested an address match list for filtering MX records
    when deciding whether a sender domain is valid. Perhaps this could
    finally be implemented to make the probes more meaningful.

    -- 
    	Viktor.