Re: [EXIM] masquerading/NAT problems

Top Page
Delete this message
Reply to this message
Author: Chris Thompson
Date:  
To: Adrian Bool
CC: exim-users
Subject: Re: [EXIM] masquerading/NAT problems
Adrian Boool writes:
[...]
> rfc1413_query_timeout = 0s
>
> Stopped all those problems.


That's appropriate if you want Exim never to make ident calls. In the
situation described I would have thought using rfc1413_except_{hosts,nets}
would be more appropriate. Ident information can be quite useful in
tracking down cases of abuse when it is available.

Of course, if the NAT box could be perusaded to do something better with
ident calls than black-hole them, that would be even better...

Chris Thompson               Cambridge University Computing Service,
Email: cet1@???    New Museums Site, Cambridge CB2 3QG,
Phone: +44 1223 334715       United Kingdom.


--
*** Exim information can be found at http://www.exim.org/ ***