Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Apr 2001 22:53:44 -0400
From:      "Andrew C. Hornback" <hornback@wireco.net>
To:        "Matthew Emmerton" <matt@gsicomp.on.ca>
Cc:        "FreeBSD Questions" <questions@FreeBSD.ORG>
Subject:   RE: ARG!!! 450 Client host rejected: cannot find your hostnam
Message-ID:  <00f601c0bb20$21b791c0$0e00000a@tomcat>
In-Reply-To: <006b01c0bb1c$685b5bb0$1200a8c0@gsicomp.on.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
Matt,

	Thanks for getting to this one before I could... :)

Everyone else,

	The best explanation that I have is that they want to authenticate exactly
where you're coming from to prevent fraud.  A lot of the various on-line
shopping sites, etc. will not allow a connection that they can't
authenticate.  Being able to authenticate where a sale comes from allows
them to track it back, etc.  If your ISP doesn't have this set up properly,
it's not going to work for you.

	When I worked at BlitzNet, we had customer support calls that I had to
handle about this.  People taking their business elsewhere because the
entire staff that I replaced didn't have a coherent strategy to make things
work properly.  That's not a good sign.

	Maybe it's not a requirement of 128 bit encryption, per se, but the
applications thereof on websites.

--- Andy

> -----Original Message-----
> From: owner-freebsd-questions@FreeBSD.ORG
> [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Matthew
> Emmerton
> Sent: Sunday, April 01, 2001 10:27 PM
> To: Randall Hopper; Andrew C. Hornback
> Cc: FreeBSD Questions
> Subject: Re: ARG!!! 450 Client host rejected: cannot find your hostnam
>
>
> >  |And what do you tell users when they try to use sites that require 128
> bit
> >  |encryption and that encryption level requires proper resolution of the
> >  |address forward and backward?  "Oh, we don't support that, it's not
> >  |important..." ?  I can hear a herd of users running for other ISPs...
> >
> > Ok, you've perked my interest.  What does reverse DNS lookup have to do
> > with 128-bit encryption.  You may be implying a specific form of
> encryption
> > (IPsec or something?).  I use 128-bit/1024-bit encryption in my e-mail
> > daily, without reverse DNS ;-)
>
> Many SSL-enabled sites will refuse to connect with clients who have IPs
> without proper reverse-DNS entries.  I can't say why, all I know is that
> from personal experience, *and* from working with the tech
> support people at
> an ISP I used to work for, this was a real big problem.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00f601c0bb20$21b791c0$0e00000a>