>I guess that is all the more reason to keep cracking on subscriber networks >and anything else we can block with. Time for everyone to get in BOFH mode >and stop being nice.
and it's not a gratuitous, let's_amuse_ourselves_with_a_tech_power_play, it's to try to stop, or reduce, the insanity. If you can't setup an mail and DNS to a correct level of credentials, then suffer the consequences. Now, we should be reasonable about this. We shold all set up the full set of credentials (that you don't have now), but the new ones should be in warn_if_reject mode. Pick out from the those potentials rejects, the ones you know are legit, are habitually sending to your users, are important to your users, and email them exactly what is wrong with their credentials and give them 30 days to fix it, afte which they will be blocked. If they can't/won't do it in 30 days, f*ck 'em. Now, ALSO notify your users that their correspondents' mail servers have below-par credentials and have 30 days to come up to spec. Ask your users to send email to their correspondents about the problems and the cutoff. This will put pressure your_users-to-their_users, rather than just tech-to-tech. Len
