OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: rejecting client=unknown[ip.ad.dr.ess]

From: LuKreme (kremelskreme.com)
Date: Tue Jun 23 2009 - 01:58:11 CDT


On 22-Jun-2009, at 18:29, mouss wrote:
>> Is there anyway to, if not outright reject anyone whose DNS shows
>> up as
>> unknown to at least tempfail them with a "Ooops, your DNS is not
>> resolving, try back later" or something?

> if you insist, you could use one of
>
> http://www.postfix.org/postconf.5.html#reject_unknown_reverse_client_hostname
> http://www.postfix.org/postconf.5.html#reject_unknown_client_hostname
>
> but use at your own risks. In particular,
> reject_unknown_client_hostname
> (previously: reject_unknown_client) _will_ block or delay legitimate
> mail.

Will it block or delay it? Can I set the error code to a tempfail
instead of a outright rejection. Blocking legitimate mail that fails
dns checks is one thing, rejecting it outright is another thing
altogether.

>> Seems at least half the spam that gets by zen shows up as
>> client=unknown
>
> how much is half of what...

I don't understand the question.

--
The quality of our thoughts and ideas can only be as good as the quality
  of our language.