Re: [EXIM] Reverse DNS lookups and security

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: Philip Hazel
Fecha:  
A: David Sewell
Cc: exim-users
Asunto: Re: [EXIM] Reverse DNS lookups and security
On Fri, 29 Jan 1999, David Sewell wrote:

> * What's the best way to block connections from known spamming hosts
> while taking care not to block legitimate senders?


If you include +allow_unknown in your list, it will permit unknown (in
the sense of "can't look up name") hosts. Of course, if you are blocking
a specific host and the manager discovers how you are configured, all he
has to do to get past your block is to delete the reverse entry in the
DNS.

We avoid blocking by host name to save doing all those DNS lookups. Any
blocks we have are by IP address.

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.



--
*** Exim information can be found at http://www.exim.org/ ***