- wrote:

> Blocking MX records that eventually resolve to localhost or
> documentation addresses (or don't resolve at all) is what comes to
> mind first.

The goal is to collect reputation information about *IP* addresses.
We don't collect reputation about senders or (claimed) domains.

Now, if you want to have a separate event for:

"IP address a.b.c.d sent mail from a domain with invalid MX records"

then I guess that might make sense, except I worry that the data will
become a bit diffuse.  The more event types you shovel into the database,
the harder it is to spot trends and to determine which hosts are bad.

Regards,

David.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to