Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Jan 1998 07:21:05 -0800 (PST)
From:      "Jonathan M. Bresler" <jmb>
To:        font@Mcs.Net (Font)
Cc:        questions@FreeBSD.ORG
Subject:   Re: MAIL FROM: address check commented out in /etc/mail additions?
Message-ID:  <199801151521.HAA00580@hub.freebsd.org>
In-Reply-To: <Pine.BSF.3.95.980115000327.11673A-100000@Jupiter.Mcs.Net> from Font at "Jan 15, 98 00:10:01 am"

next in thread | previous in thread | raw e-mail | index | archive | help
Font wrote:
> Playing around with some antispam/antirelay mechanisms on my new mail
> server, I added in the rulesets from /etc/mail/sendmail.cf.additions as
> well as the check_rcpt from http://www.sendmail.org/antispam.html, but
> found that non-resolving MAIL FROM: domains weren't being rejected.  Upon
> closer examination I found that a line in sendmail.cf.additions had been
> commented out:
> 
> # R<?> $* < @ $+ >      $#error $: "451 Domain does not resolve"
> 
> I was just curious as to whether this was intentional (what are the
> disadvantages here?  can some legit mail be rejected?) or just overlooked. 
> I also noticed that these rules were slightly different from the ones on
> the sendmail site, but I don't know enough about rulesets yet to be able
> to question anything.  :-) 

	intentional....there are a lot of broken DNS configurations out there.
	having the comment in place lets the user decide whether or not
	to talk to broken DNS configurations.

	i would rather not make that decision for everyone.
	rather give them the tool and let them use it,
	just like you did ;)
jmb



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199801151521.HAA00580>