>Anyone else seen such a significant drop in rejects?

wait, the only reject that should be immediately and clearly affected
is reject_unkown_sender_domain which gives the maillog reject text of:

Sender address rejected: Domain not found

and that requires :

1. only bogus .com and .net domains

2. the domain must not be in *.gtld-servers.net



eg:  here's a domain the exists

[EMAIL PROTECTED] lconrad]# dig smathersthompson.com any

; <<>> DiG 9.2.1 <<>> smathersthompson.com any
;; global options:  printcmd
;; connection timed out; no servers could be reached
[EMAIL PROTECTED] lconrad]# dig @a.gtld-servers.net smathersthompson.com any

; <<>> DiG 9.2.1 <<>> @a.gtld-servers.net smathersthompson.com any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59263
;; flags: qr rd; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;smathersthompson.com.          IN      ANY

;; ANSWER SECTION:
smathersthompson.com.   172800  IN      NS      ns1.namesdirect.com.
smathersthompson.com.   172800  IN      NS      ns2.namesdirect.com.

  but whose DNS are down:

# dig smathersthompson.com a

; <<>> DiG 9.2.1 <<>> smathersthompson.com a
;; global options:  printcmd
;; connection timed out; no servers could be reached


so the spammers have to start foreging bogus  .com and .net domains as 
their sender and HELO hostnames for

reject_unknown_sender_domain
reject_unknown_hostname

to be rendered useless.

Len



Reply via email to