OT? DNS checks in postfix - best practice, experience

Jogi Hofmüller <[email protected]> Thu, 06 Mar 2014 10:42:38 +0100
Newsgroups gmane.linux.debian.user.isp
Message-ID <[email protected]>
Dear all,

Ever since we started using postfix in our small environment we had all
the DNS related checks [1] enabled.  Every now and then we get problems
because a misconfiguration on some mail server keeps it from
successfully delivering e-mail to us.

Personally I still think that having a matching IN A and IN PTR record
for a mail server *and* use the same name in an EHLO/HELO message is a
minimum requirement for a decently configured service.  Still, some
admins disagree ...

Now I was wondering how other people deal with this issue.  Curious what
you people think/say.

[1]  DNS related checks we use:

  reject_non_fqdn_sender
  reject_non_fqdn_recipient
  reject_non_fqdn_helo_hostname
  reject_unknown_reverse_client_hostname
  reject_unknown_recipient_domain
  reject_unknown_sender_domain

Regards,
-- 
j.hofmüller

Gerüchtegenerator		               http://plagi.at/geruecht
signature.asc (application/pgp-signature, 230 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iF4EAREIAAYFAlMYQw4ACgkQkaXhaapqItkRFgD/dyMUAW3cj7YDv3tvbTDH2wUn
B/CEsjXaFwwqHx2Wui8A/31rdtueDFEAOulQXevrClhwyc+A509nxfHYO30VpHEr
=QaXq
-----END PGP SIGNATURE-----