Re: [exim] Preventing Sender Forgery .

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Jethro R Binks
Date:  
À: exim-users
Sujet: Re: [exim] Preventing Sender Forgery .
On Tue, 26 Aug 2008, Oliver von Bueren wrote:

> > Why?
> >
> Hmm, that is a good question, as my experience tells me that security
> through hiding doesn't work, on the other hand it somehow doesn't feel
> right to me. Considering this sentence again, there's no real reason
> other than my feeling.;-)
> Anyway, if someone doesn't know http://openrbl.org/, try that as a
> starting point (use JS client and click through the lists), a lot of
> reading concerning the policies of the different lists compared to your
> own policy you have running your mail server and also some DNSBL lists
> from Google.
> Said that, I don't think an exact copy of my list set up would help a
> lot, IMHO every admin should decide for himself which lists are acceptable.


Of course, and I entirely agree, but many have found that the sharing of
particularly effective combinations of DNSBLs to be useful -- but always
with the caveat that the de/listing policies and operation must be
carefully considered by any administrator who is considering using any
particular one.

Added to that is the fact that DNSBLs come and go, and maybe there are
newer ones around these days that may prove effective that those who
already have an established DNSBL combination may wish to consider.

Jethro.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks
Computing Officer, IT Services
University Of Strathclyde, Glasgow, UK