Re: [Exim] Verisign pulls a fast one

Góra strony
Delete this message
Reply to this message
Autor: Christian Vogel
Data:  
Dla: Andres L. Figari
CC: exim-users
Temat: Re: [Exim] Verisign pulls a fast one
Hi Andres,

On Tue, Sep 16, 2003 at 07:05:48AM -0700, Andres L. Figari wrote:
> Is it possible to write a rule that sees if the email server for this
> domain matches the Verisign IP to be dropped. It may solve SPAM with
> fake domain names, no?


Yes, it will solve this. As someone else already mentioned today on
this list, modify your dnslookup-router(s) to look like...:

dnslookup:
        (...)
        driver = dnslookup
        # we ignore verisign 64.94.110.0/24 because of their
        # stupid wildcard A records
        ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 : \
                172.16.0.0/12 : 10.0.0.0/8 : 169.254.0.0/16 : \
                64.94.110.0/24
        (...)


Make sure, that you have a "verify sender" rule in your ACLs.

        Chris


--
Christian Vogel -- chris@???