RE: Re[2]: [Declude.JunkMail] DNS Changes
Kevin, in our experience, the two OpenDNS servers (208.67.220.220 and 208.67.222.222) that we suggest be used with Declude, work wonderfully and the uptime is excellent. Like i said earlier, we here in support see a lot of problems from our customer's in-house DNS servers failing to do recursive lookups. Giving our customers the suggestion and the option to use the OpenDNS server(s) is exactly that, a suggestion and an option. You can use any DNS server that does recursive lookups. The problem is, most of the people we come across on a daily basis do not have recursive lookup option set up on their local DNS servers. From: "Kevin Bilbee" <[EMAIL PROTECTED]> Sent: Wednesday, October 08, 2008 7:06 PM To: declude.junkmail@declude.com Subject: RE: Re[2]: [Declude.JunkMail] DNS Changes I would have to agree with sandy. I use Open DNS at home as an extra step to keep my kids off of unwanted web site, I also use other measures. Two week ago we had no DNS services for an hour from OpenDNS. This would definitely cause issues with a mail server. I would place a CACHIND DNS software on the local machine. We use BIND and do not have a single problem with it. It runs solid. We are on W2k SmarterMail. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Wednesday, October 08, 2008 2:30 PM To: declude.junkmail@declude.com Subject: re: Re[2]: [Declude.JunkMail] DNS Changes Sandy, we suggest that you use the one that we recommend because 95% of issues with declude are related to in-house DNS servers not working to do recursive lookups correctly causing problems for our customers. I'm sure Todd has the skills to support his own DNS server as well, but that has nothing to do with why we suggest to use ours. We have seen the problem with in-house DNS servers so many times that we thought it would be a good idea to provide a suggestion to our customers. From: "Sanford Whiteman" <[EMAIL PROTECTED]> Sent: Wednesday, October 08, 2008 5:06 PM To: "Linda Pagillo" Subject: Re[2]: [Declude.JunkMail] DNS Changes > Also, we suggest that you use the following DNS server with Declude > 208.67.220.220. This is an OpenDNS server and it is extremely reliable. Sorry to be meddlesome, but recommending that a single, remote, uncontrolled DNS server "always" be used for Declude's RBL lookups kinda flies in the face of best practices. The very reason people run their own recursive DNS servers is to increase performance, and in 2008, if you can't install and support one of the several high-performance DNS servers out there (Simple DNS, PowerDNS, BIND, MS DNS) for recursive use only, chances are you should be outsourcing your anti-spam measures as well. From experience, I'm sure Todd has the skills to support his own DNS, so it seems defeatist to suggest he do otherwise after this migration period. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] DNS Changes
I would have to agree with sandy. I use Open DNS at home as an extra step to keep my kids off of unwanted web site, I also use other measures. Two week ago we had no DNS services for an hour from OpenDNS. This would definitely cause issues with a mail server. I would place a CACHIND DNS software on the local machine. We use BIND and do not have a single problem with it. It runs solid. We are on W2k SmarterMail. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Wednesday, October 08, 2008 2:30 PM To: declude.junkmail@declude.com Subject: re: Re[2]: [Declude.JunkMail] DNS Changes Sandy, we suggest that you use the one that we recommend because 95% of issues with declude are related to in-house DNS servers not working to do recursive lookups correctly causing problems for our customers. I'm sure Todd has the skills to support his own DNS server as well, but that has nothing to do with why we suggest to use ours. We have seen the problem with in-house DNS servers so many times that we thought it would be a good idea to provide a suggestion to our customers. _ From: "Sanford Whiteman" <[EMAIL PROTECTED]> Sent: Wednesday, October 08, 2008 5:06 PM To: "Linda Pagillo" Subject: Re[2]: [Declude.JunkMail] DNS Changes > Also, we suggest that you use the following DNS server with Declude > 208.67.220.220. This is an OpenDNS server and it is extremely reliable. Sorry to be meddlesome, but recommending that a single, remote, uncontrolled DNS server "always" be used for Declude's RBL lookups kinda flies in the face of best practices. The very reason people run their own recursive DNS servers is to increase performance, and in 2008, if you can't install and support one of the several high-performance DNS servers out there (Simple DNS, PowerDNS, BIND, MS DNS) for recursive use only, chances are you should be outsourcing your anti-spam measures as well. From experience, I'm sure Todd has the skills to support his own DNS, so it seems defeatist to suggest he do otherwise after this migration period. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
re: Re[2]: [Declude.JunkMail] DNS Changes
Sandy, we suggest that you use the one that we recommend because 95% of issues with declude are related to in-house DNS servers not working to do recursive lookups correctly causing problems for our customers. I'm sure Todd has the skills to support his own DNS server as well, but that has nothing to do with why we suggest to use ours. We have seen the problem with in-house DNS servers so many times that we thought it would be a good idea to provide a suggestion to our customers. From: "Sanford Whiteman" <[EMAIL PROTECTED]> Sent: Wednesday, October 08, 2008 5:06 PM To: "Linda Pagillo" Subject: Re[2]: [Declude.JunkMail] DNS Changes > Also, we suggest that you use the following DNS server with Declude > 208.67.220.220. This is an OpenDNS server and it is extremely reliable. Sorry to be meddlesome, but recommending that a single, remote, uncontrolled DNS server "always" be used for Declude's RBL lookups kinda flies in the face of best practices. The very reason people run their own recursive DNS servers is to increase performance, and in 2008, if you can't install and support one of the several high-performance DNS servers out there (Simple DNS, PowerDNS, BIND, MS DNS) for recursive use only, chances are you should be outsourcing your anti-spam measures as well. From experience, I'm sure Todd has the skills to support his own DNS, so it seems defeatist to suggest he do otherwise after this migration period. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] DNS Changes
> Also, we suggest that you use the following DNS server with Declude > 208.67.220.220. This is an OpenDNS server and it is extremely reliable. Sorry to be meddlesome, but recommending that a single, remote, uncontrolled DNS server "always" be used for Declude's RBL lookups kinda flies in the face of best practices. The very reason people run their own recursive DNS servers is to increase performance, and in 2008, if you can't install and support one of the several high-performance DNS servers out there (Simple DNS, PowerDNS, BIND, MS DNS) for recursive use only, chances are you should be outsourcing your anti-spam measures as well. From experience, I'm sure Todd has the skills to support his own DNS, so it seems defeatist to suggest he do otherwise after this migration period. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.