Hi Andres,
On Tue, Sep 16, 2003 at 07:05:48AM -0700, Andres L. Figari wrote:
> Is it possible to write a rule that sees if the email server for this
> domain matches the Verisign IP to be dropped. It may solve SPAM with
> fake domain names, no?
Yes, it will solve this. As someone else already mentioned today on
this list, modify your dnslookup-router(s) to look like...:
dnslookup:
(...)
driver = dnslookup
# we ignore verisign 64.94.110.0/24 because of their
# stupid wildcard A records
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 : \
172.16.0.0/12 : 10.0.0.0/8 : 169.254.0.0/16 : \
64.94.110.0/24
(...)
Make sure, that you have a "verify sender" rule in your ACLs.
Chris
--
Christian Vogel -- chris@???
