On Fri, Aug 14, 2026 at 04:05:19PM -0400, John Levine via mailop wrote: > It appears that Ferris, Rhys (SAA) via mailop <[email protected]> > said: > >-=-=-=-=-=- > >-=-=-=-=-=- > >I know, it’s always DNS… > > > >I’m curious how folks are handling DNS for their MX infrastructure these > >days. Are you using a DNS/security layer that does any sort of > >domain- or reputation-based filtering, or is your MX-related DNS essentially > >just authoritative DNS returning answers? > > I know a lot of people using RPZ to filter the outbound queries their > networks send, but I don't know anyone > filtering inbound other than for DDoS attacks. > > If bad guys want to find your mail servers I expect they'll use public caches > like 1.1.1.1 or 8.8.8.8.
And it is generally wise to not neglect <https://datatracker.ietf.org/doc/html/rfc8906>. -- Viktor. 🇺🇦 Слава Україні! _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
