OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: smtpd_recipient_restrictions suddenly stopping mail

From: Noel Jones (njonesmegan.vbhcs.org)
Date: Sun Mar 15 2009 - 15:26:36 CDT


Sahil Tandon wrote:
> On Sun, 15 Mar 2009, Wietse Venema wrote:
>
>> Sahil Tandon:
>>> OpenDNS will not blindly redirect DNS queries that look like DNSBL
>>> requests. Notice the difference:
>>>
>>> % dig resolver1.opendns.com www.abcdefghijklmnop12345.com +short
>>> 208.69.32.132
>>> % dig resolver1.opendns.com 40.30.20.10.www.abcdefghijklmnop12345.com
>>> +short
>>> %
>> Note, this still breaks lookups of rfc-ignorant.org and other sites
>> that blacklist domain names instead of IP addresses.
>
> FWIW, OpenDNS appears to work with rfc-ignorant.org, but that's only because
> they know about it: http://www.opendns.com/support/article/33
>
>> If you must run an MX host, use a real DNS server.
>
> Agreed!
>

If you sign up for a free account at OpenDNS you can turn off
their helpful typo-correction feature.

Then OpenDNS works splendidly on an MX.
They do have a clue.

   -- Noel Jones