[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: misconfigured mailout lists.debian.org



On Wed, Mar 27, 2002 at 05:27:42PM +0100, martin f krafft wrote:
| also sprach dman <dman@dman.ddts.net> [2002.03.27.1557 +0100]:
| > | true. and it's not an excuse. it means that the provider is just
| > | another one of those that doesn't know what they're doing. DNS is
| > | bloody simple, it's amazing how many (influential) parties get it
| > | wrong.
| > 
| > I don't know how knowledgeable or not the provider is.  I have no
| > contact with them.  The IPs my employer is actually using have proper
| > reverse DNS, but the admin had to tell the provider what entries he
| > wanted.  He wasn't using his whole IP block, so he didn't specify
| > reverse DNS for the unused IPs.  Now one of those IPs is being used.
| 
| with or without permission?

with.  With special cabling, no less!  (a custom y-cable to connect
one NIC to the LAN and one to the outside using the single jack in the
wall)

| if with, then have your admin tell them to
| set the reverse.

As you noted below, "now that changes the perspective".

| you should get a cool domainname first,

Costs money :-(.

| or i'll give you a subdomain of pantsfullofunix.net if you wish.

That'd be nice, though I've got "dman.ddts.net" right now.

| that's an opportunity you shouldn't miss, and for which you could
| even spend some bucks administrative fees. it's very cool and fun to
| have your own IP, which resolves to your own FQDN hostname!!!

It is.

| > | too much trouble. get your provider to do it right and your problems
| > | are history.
| > 
| > Since I'm only certain I'll be here for another 7 weeks, it's not
| > worth the hassle of getting a third party to update the records, then
| > re-update them when I'm gone.  I _may_ be here longer, and I might not
| > be.
| 
| ah, now that changes the perspective...
| 
| > I do understand people who reject hosts with no reverse DNS and I
| > can't really give any argument against it.  I wonder how much good it
| > actually does, though, since my DSL line (back at home) had a reverse
| > lookup.
| 
| i don't really understand them, other than they are refusing to
| cooperate with the machines of people who don't know their stuff.

The machines are not correct, according to the standards.  It all
depends on how much you want to uphold the existing standards and

| i have chosen not to reject if the reverse and forward don't map
| simply because my ratio of false positives to actual spam was bad,
| causing me to loose legit email, but YMMV.
| 
| > Not a particularly useful name, but it does have matching A and PTR
| > records.  I guess my point in saying this is that blocking based on
| > following DNS standards doesn't necessarily block open relays on DSL
| > connections.
| 
| nope, that's what the various RBL lists are for. then again, before
| providers hand out static IPs they could at least ensure that the
| people running that machine know what they are doing too. your DSL
| provider understood the principle behind DNS it seems,

Technically the machine at home (with the IP given in the last
message) doesn't have a static IP.  It uses DHCP to obtain its IP.  In
practice, however, the IP has never changed (except for when I changed
the NIC, and that was only once).  I'm not even sure the ISP has thing
set up quite right because I don't think the machine is renewing its
DHCP lease!  If you want to try and help me guess what's wrong with
the system, mail me off list for the whole story :-).

| it wouldn't be difficult for him to run periodic relay tests and to
| warn-then-kick customers that can't do it right. i realize that this
| is harsh, but

The only harsh part is potential lawsuits ala ORBZ.  An ISP might have
better luck, though, if they can ensure the contract gives them the
right.

| even though debian doesn't require *that* much expertise to put up
| a full-fledged public server doesn't mean that everybody gets to do
| what they want. i am *pissed* at the amount of spam i get from US DSL
| providers, and if i could, i'd block them all (save speakeasy.net)!

Yeah.

-D

-- 

Folly delights a man who lacks judgement,
but a man of understanding keeps a straight course.
        Proverbs 15:21


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: