OT? DNS checks in postfix - best practice, experience
Jogi Hofmüller <[email protected]> Thu, 06 Mar 2014 10:42:38 +0100
| Newsgroups | gmane.linux.debian.user.isp |
|---|---|
| Message-ID | <[email protected]> |
Dear all, Ever since we started using postfix in our small environment we had all the DNS related checks [1] enabled. Every now and then we get problems because a misconfiguration on some mail server keeps it from successfully delivering e-mail to us. Personally I still think that having a matching IN A and IN PTR record for a mail server *and* use the same name in an EHLO/HELO message is a minimum requirement for a decently configured service. Still, some admins disagree ... Now I was wondering how other people deal with this issue. Curious what you people think/say. [1] DNS related checks we use: reject_non_fqdn_sender reject_non_fqdn_recipient reject_non_fqdn_helo_hostname reject_unknown_reverse_client_hostname reject_unknown_recipient_domain reject_unknown_sender_domain Regards, -- j.hofmüller Gerüchtegenerator http://plagi.at/geruecht
signature.asc
(application/pgp-signature, 230 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EAREIAAYFAlMYQw4ACgkQkaXhaapqItkRFgD/dyMUAW3cj7YDv3tvbTDH2wUn B/CEsjXaFwwqHx2Wui8A/31rdtueDFEAOulQXevrClhwyc+A509nxfHYO30VpHEr =QaXq -----END PGP SIGNATURE-----