Date: Sat, 17 Jan 1998 17:31:27 -0800 (PST) From: Dan Busarow <dan@dpcsys.com> To: Thordur Ivarsson <totii@est.is> Cc: Font <font@Mcs.Net>, questions@FreeBSD.ORG Subject: Re: MAIL FROM: address check commented out in /etc/mail additions? Message-ID: <Pine.UW2.3.95.980117165645.15493A-100000@cedb> In-Reply-To: <34C1485E.977C0065@est.is>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 18 Jan 1998, Thordur Ivarsson wrote:
> This rule is rather nasty: If sender has not legimate A record in name
> server the rule fails and sends back error, CNAME record is not enough
> for sender.
It may be that from time to time we bounce legitimate mail.  But
I haven't received any complaints and I've had this turned on for 
several months now.  We also return a 451 error meaning that they
will retry on a DNS hickup.
But I thought I'd take a look at the logs again today.  There
have been 450 rejects so far today, here's the summary.
   7 1-707-429-0999-Doc.989 206.214.98.15
   5 1-707-429-0999-Doc.989 206.214.98.16
   5 16683.com 210.140.140.2
  15 17482.com 209.135.75.2
  22 19735.com 195.10.42.36
   1 1cannel.com 169.152.79.3             not a registered domain
  20 23615.com 208.133.82.3
  22 2e2yji.net 205.139.56.34
   1 32204.com 206.151.85.34
  12 Beat-IRS-411.com 206.214.98.11
  11 Freedom.bizzpost.com 207.43.80.148 NO NS records for freedom, IP 
                                        is mail.bizzpost.com
This next one is one of our web servers so I checked on it.  It was
someone (or bot) hitting a CGI form with a bogus address (no MX or A
records) every half hour.
  45 Northgrum.Com 206.16.184.194
   2 bingo.edu 207.100.79.10
   9 bulkemailserver.com 208.139.245.34
  56 cantv.com 161.196.66.41           NO DNS
  88 do 206.16.184.194                 another web form (twice every half hour)
  21 gamescleaning.com.au 208.133.82.3
   9 le1ttrbox.com 198.69.103.26
  45 mail.hpccsocal.com 207.217.137.18 earthlink dialup (34 separate IPs)
  20 maketingtips.com 204.174.35.21
  18 qcqnb5.net 206.141.239.126
   9 skywa1tches.net 198.69.103.26
   5 t-1net.com 132.248.251.5
   2 t-1net.com 148.232.1.2
I don't think we or our customers are missing anything.
Dan
-- 
 Dan Busarow                                                  714 443 4172
 DPC Systems / Beach.Net                                    dan@dpcsys.com
 Dana Point, California  83 09 EF 59 E0 11 89 B4   8D 09 DB FD E1 DD 0C 82
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.UW2.3.95.980117165645.15493A-100000>
