>What is an MTA supposed to do with a message addressed to a domain with
>a NULL MX?

Reject it with a 556 status code and 5.1.10 enhanced status code.  If
the message was already relayed, return a DSN if it makes sense.  See
section 4.1.

You can also feel free to reject mail if the return address has a null
MX since you can't reply; in that case it's status 550 and 5.7.27.

>I'm looking at some logs and seeing attempts to deliver email to lots of
>domains with NULL MX enabled (that have been so for years) and wondering
>if I can safely mine these logs and add all the originating MTA IPs to
>an internal RBL.

That seems reasonable.  Any MTA that tries the A address if you
publish a null MX (that's "domain MX 0 .") is so broken that it
deserves to die if it's not already spamware.  There are plenty of
MTAs that will sit on the message for a week hoping the next time they
look up the MX it will be different, but I can't recall seeing any
legitimate MTA for a long time that falls back to A if it finds an MX.

The RFC is new but the draft was kicking around since 2006, and was
never controversial.

R's,
John

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to