Man, they'll try anything to hack your system...

Bill McGonigle bill at bfccomputing.com
Sun Jan 29 15:54:01 EST 2006


On Jan 28, 2006, at 15:24, Dan Jenkins wrote:

> What experience have folk had tightening restrictions, like lack of MX 
> or A or mis-matched MX/PTR pair?
> Does it still cause a lot of false rejections?

I turned on the postfix restriction:

   smtpd_sender_restrictions = reject_unknown_sender_domain

a couple days ago and found some servers I take care of had a hosts 
line like:

   127.0.0.1    kermit localhost  localhost.localdomain

and so mails would go out claiming to be from 
<root at localhost.localdomain>

I fixed the hosts line and now mails come through.

I consider postfix to be working properly in this case and the fedora 
core installer to be the misbehaver here.

-Bill

-----
Bill McGonigle, Owner           Work: 603.448.4440
BFC Computing, LLC              Home: 603.448.1668
bill at bfccomputing.com           Cell: 603.252.2606
http://www.bfccomputing.com/    Page: 603.442.1833
Blog: http://blog.bfccomputing.com/
VCard: http://bfccomputing.com/vcard/bill.vcf




More information about the gnhlug-discuss mailing list