OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: smptd_sender_restrictions reject_non_fqdn_sender and no MX records

From: Aaron Wolfe (aawolfegmail.com)
Date: Tue Sep 11 2007 - 03:54:57 CDT


On 9/11/07, Jim Potter <jimbecause.org.uk> wrote:
>
> Hi all,
> I've just implemented some restrictions on mail going through our
> system in an effort to limit spam. this includes:
>
> smtpd_sender_restrictions =
> permit_sasl_authenticated,
> permit_mynetworks,
> reject_non_fqdn_sender,
> reject_unknown_sender_domain,
> permit
>
> I work in a school connected to the local council network (firewalled
> off from the outside world). It would appear that a lot of the other
> schools do not have MX records registered on the council DNS servers,
> and any mail from these gets refused with Sender address rejected:
> domain not found.

How do you send mail to them if their domains do not have any DNS?
I use this check on a public mail server because I figure almost all
legitimate mail comes from domains that do have some DNS of some sort, but
now I wonder if there are exceptions I haven't thought of? I know sometimes
people use made up senders for things like servers/automated reporting and
monitoring systems that only generate outbound mail. But I am guessing
these schools also expect to receive it somehow? Maybe this check is not as
safe as I assumed...

To get round this, is there any way of blindy accepting mail that has
> been forwarded by a specific host?
>
> thanks in advance
>
> Jim Potter
> Brislington Enterprise College
> Bristol
> UK
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>