OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Subject Missing]

From: Jorey Bump (listjoreybump.com)
Date: Thu Apr 24 2008 - 11:59:43 CDT


mouss wrote, at 04/24/2008 11:19 AM:

> you could use check_client_access with a pcre:
> /\d+([-\.]\d+){3}/ 554 5.7.1 Generic hostname. Please use your ISP
> relay or fix you rDNS

This seems overzealous to me. I wouldn't personally choose to embed the
IP address in the rDNS hostname, but there's nothing inherently wrong
with it. Support varies among ISPs for setting rDNS, and local
administrators often lack the skill or understanding to get it right.
Nonetheless, they might be running a perfectly legitimate mail server.
Has this rule created any problems for you?