Re: [Exim] Verisign pulls a fast one

Top Page
Delete this message
Reply to this message
Author: Oren Levi
Date:  
To: Christian Vogel
CC: exim-users
Subject: Re: [Exim] Verisign pulls a fast one
Yep seems to work :)

This is what i put:

lookuphost:
driver = dnslookup
ignore_target_hosts = 64.94.110.11


why did you ignore the entire C subnet ?


Thanks,
Oren.


----- Original Message -----
From: "Christian Vogel" <chris@???>
To: "Andres L. Figari" <andres@???>
Cc: <exim-users@???>
Sent: Tuesday, September 16, 2003 12:05 PM
Subject: Re: [Exim] Verisign pulls a fast one


> Hi Andres,
>
> On Tue, Sep 16, 2003 at 07:05:48AM -0700, Andres L. Figari wrote:
> > Is it possible to write a rule that sees if the email server for this
> > domain matches the Verisign IP to be dropped. It may solve SPAM with
> > fake domain names, no?
>
> Yes, it will solve this. As someone else already mentioned today on
> this list, modify your dnslookup-router(s) to look like...:
>
> dnslookup:
>         (...)
>         driver = dnslookup
>         # we ignore verisign 64.94.110.0/24 because of their
>         # stupid wildcard A records
>         ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 : \
>                 172.16.0.0/12 : 10.0.0.0/8 : 169.254.0.0/16 : \
>                 64.94.110.0/24
>         (...)

>
> Make sure, that you have a "verify sender" rule in your ACLs.
>
>         Chris

>
> --
> Christian Vogel -- chris@???
>
> --
>
> ## List details at http://www.exim.org/mailman/listinfo/exim-users Exim

details at http://www.exim.org/ ##
>
>
>