Re: A Quickhack

On Sun, Oct 26, 2003 at 02:06:02PM +0100, Hadmut Danisch wrote:
> As a disrespectful consequence of my last posting about the difference
> between authentication and authorization:
> 
> We could cover the hole EHLO/HELO story by simply giving out this
> recommendation:
> 
>   When receiving a EHLO/HELO command, do an A query to the 
>   given parameter and abort if the response does not match 
>   the IP address.
> 
> That's it, gentlemen, it's as simple.

Nope   sorry.   

It might tell you that "yes, this host is allowed to be this IP"
but it says nothing about "this IP is allowed to send mail and 
claim to be this hostname"

I can think of many times that I've had hosts that have completely
valid host/IP setups, but that I would rather they not send mail.

You need to do a DRIP-ish lookup for that.

-- 
 /  \__  | Richard Rognlie / Sultan of Sendmail / Gamerz.NET Lackey
 \__/  \ | http://www.gamerz.net/rrognlie/ <rrognlie at gamerz.net>
 /  \__/ | 
 \__/    | CAUTION: may contain Mature material......but I doubt it.