RE: Re[2]: [Declude.JunkMail] Negative Weight an IP
Thanks Sandy. I will look into this. Before our move, we had our servers within Active Directory and had two internal DNS servers running. Now we have our internet servers in a DMZ and away from Active Directory. So some of this I'm learning as I go (not what you want to hear, I know!) Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, October 23, 2008 6:53 PM To: Todd Richards Subject: Re[2]: [Declude.JunkMail] Negative Weight an IP I can easily get a REVDNS through my ISP. Not for your private IP range, you can't. However, I'm not sure what I would get it as. Obviously my mail server was easy (mail.domain.com). However, with a web server that hosts many sites, do I have to have a REVDNS for each domain name? No, you decide the single most appropriate canonical hostname for the box and point the IP to that hostname. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Negative Weight an IP
Sandy, I guess that was a question that was on my mind. We've never had anything set up for the web server before - only the REVDNS for the mail server itself. In order to set up a valid PTR (that is, canonically accurate) for the webserver as queried by your mailserver, you need to have a DNS server that is capable of returning PTR data for your private IP range. Note that this is actually reason #nnn to not rely solely on external DNS servers (viz. the debate from a few weeks ago), since those servers cannot return records for your internal IPs. It is true that in very simple networks, one rarely needs internal reverse DNS resolution; it is admitted that maintaining in-addr.arpa zones is indeed a step up from the pure, demonstrated simplicity of running a caching-only recursive DNS server. Nonetheless, if you have more than one internal machine *and* maintain a Declude installation, I remain firm in my belief that you should be able to maintain a DNS server. The other way around it is to use whitelisting, etc., but I really like to have my machines know each other. Maybe that's just my thing. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Negative Weight an IP
I can easily get a REVDNS through my ISP. Not for your private IP range, you can't. However, I'm not sure what I would get it as. Obviously my mail server was easy (mail.domain.com). However, with a web server that hosts many sites, do I have to have a REVDNS for each domain name? No, you decide the single most appropriate canonical hostname for the box and point the IP to that hostname. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.