Re: No DNS consistency checks in Debian spam filter?
Hi,
On Tue Jan 08, 2008 at 09:20:15 -0800, Mike Bird wrote:
> The single most powerful and most efficient spam filter test is to
> verify DNS consistency. Judging by the spam now swamping
> these lists, Debian does not employ such a test.
How about instead of complaining on the debian-user list contacting the
debian listmasters and recommend your changes there? It is just unfair
to ruthless point on others with the finger but in no way help to fix
stuff.
> In Postfix, including reject_unknown_client_hostname at an
> appropriate spot in smtpd_client_restrictions does the trick.
And that produces a loss of VERY much valid email. So we will not
implement that.
> Alternatively, us old PERL bashers iterate over all PTR records
> for the IP address, and for each of those PTR records we iterate
> over all the A records, and we only accept the connection if at
> least one of those A records contains the connecting IP.
You cannot enforce persons running their own mailservers to use their
ISP provider mailserver relays.
Greeting
Martin (Debian Listmaster)
--
Martin Zobel-Helas <zobel@debian.org> | Debian Release Team Member
Debian & GNU/Linux Developer | Debian Listmaster
Public key http://zobel.ftbfs.de/5d64f870.asc - KeyID: 5D64 F870
GPG Fingerprint: 5DB3 1301 375A A50F 07E7 302F 493E FB8E 5D64 F870
Reply to: