It appears that Ferris, Rhys (SAA) via mailop <[email protected]> said: >-=-=-=-=-=- >-=-=-=-=-=- >I know, it’s always DNS… > >I’m curious how folks are handling DNS for their MX infrastructure these days. >Are you using a DNS/security layer that does any sort of >domain- or reputation-based filtering, or is your MX-related DNS essentially >just authoritative DNS returning answers?
I know a lot of people using RPZ to filter the outbound queries their networks send, but I don't know anyone filtering inbound other than for DDoS attacks. If bad guys want to find your mail servers I expect they'll use public caches like 1.1.1.1 or 8.8.8.8. R's, John _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
