Re: [EXIM] Reverse DNS lookups and security

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Philip Hazel
日付:  
To: David Sewell
CC: exim-users
題目: Re: [EXIM] Reverse DNS lookups and security
On Fri, 29 Jan 1999, David Sewell wrote:

> * What's the best way to block connections from known spamming hosts
> while taking care not to block legitimate senders?


If you include +allow_unknown in your list, it will permit unknown (in
the sense of "can't look up name") hosts. Of course, if you are blocking
a specific host and the manager discovers how you are configured, all he
has to do to get past your block is to delete the reverse entry in the
DNS.

We avoid blocking by host name to save doing all those DNS lookups. Any
blocks we have are by IP address.

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.



--
*** Exim information can be found at http://www.exim.org/ ***