Re: [EXIM] masquerading/NAT problems

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Chris Thompson
Date:  
À: Adrian Bool
CC: exim-users
Sujet: Re: [EXIM] masquerading/NAT problems
Adrian Boool writes:
[...]
> rfc1413_query_timeout = 0s
>
> Stopped all those problems.


That's appropriate if you want Exim never to make ident calls. In the
situation described I would have thought using rfc1413_except_{hosts,nets}
would be more appropriate. Ident information can be quite useful in
tracking down cases of abuse when it is available.

Of course, if the NAT box could be perusaded to do something better with
ident calls than black-hole them, that would be even better...

Chris Thompson               Cambridge University Computing Service,
Email: cet1@???    New Museums Site, Cambridge CB2 3QG,
Phone: +44 1223 334715       United Kingdom.


--
*** Exim information can be found at http://www.exim.org/ ***