Re: [Exim] Verisign pulls a fast one

Gary Palmer wrote:
> Verisign is adding wildcard DNS records to all of .com and .net pointing
> to one of their servers "as browsers don't return any useful information
> when the user inputs an unregistered domain". This defeats very nicely
> sender DNS verification as now *all* .com/.net domains are valid.
> (Unless you are insisting on MX records for all domains, which is a
> slight violation of RFC)
>
> I strongly recommend EVERYONE add:
>
> 64.94.110.11
>
> to the 'ignore_target_hosts' directive on any/all dnslookup routers (in
> addition to the RFC 1918 entries that are already there, right? :) )
>
> I'm wondering how long it will take for that IP to start showing up on
> DNSBLs.

http://slashdot.org/articles/03/09/16/0034210.shtml?tid=126&tid=95&tid=98&tid=99

(do the necessary cut 'n paste to this url if your MTA effs up the line
length).

--Tonni


--
Tony Earnshaw

Millom kaksar eg litet kann trivast, millom jamningar helst er eg nøgd

http://www.billy.demon.nl
Mail: tonni@???