[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

OT? DNS checks in postfix - best practice, experience



Dear all,

Ever since we started using postfix in our small environment we had all
the DNS related checks [1] enabled.  Every now and then we get problems
because a misconfiguration on some mail server keeps it from
successfully delivering e-mail to us.

Personally I still think that having a matching IN A and IN PTR record
for a mail server *and* use the same name in an EHLO/HELO message is a
minimum requirement for a decently configured service.  Still, some
admins disagree ...

Now I was wondering how other people deal with this issue.  Curious what
you people think/say.

[1]  DNS related checks we use:

  reject_non_fqdn_sender
  reject_non_fqdn_recipient
  reject_non_fqdn_helo_hostname
  reject_unknown_reverse_client_hostname
  reject_unknown_recipient_domain
  reject_unknown_sender_domain

Regards,
-- 
j.hofmüller

Gerüchtegenerator		               http://plagi.at/geruecht

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: