freebsd.org maillist mx discard policy

2010-08-19 Thread Jeff Laine 

Hello list,

My question is regarding official maillist smtp servers. I'm trying to 
subscribe on security-notifications, but (for some reasons) our 
outgoing MX has no PTR record and mx1.freebsd.org rejects my message:



Reporting-MTA: dns; xxx
Arrival-Date: Mon, 16 Aug 2010 17:18:39 +0400 (MSD)

Final-Recipient: RFC822; 
freebsd-security-notifications-requ...@freebsd.org

Action: delayed
Status: 4.7.1
Remote-MTA: DNS; mx1.freebsd.org
Diagnostic-Code: SMTP; 450 4.7.1 Client host rejected: cannot find 
your hostname, [x.x.x.x]

Last-Attempt-Date: Mon, 16 Aug 2010 21:24:36 +0400 (MSD)


I have the SPF record set up for our domain which designates our 
external IP as a valid sender address for the domain, but I still get 
rejected.


So, the question is: do the freebsd.org maillist servers follow SPF 
records or PTR record is mandatory?



TIA.

--
Best regards,
Jeff

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org

Re: freebsd.org maillist mx discard policy

2010-08-19 Thread Matthew Seaman 
On 19/08/2010 07:54, Jeff Laine wrote:
 So, the question is: do the freebsd.org maillist servers follow SPF
 records or PTR record is mandatory?
 

The PTR is mandatory.  The vast majority of SMTP senders without proper
PTR records are zombie machines spreading spam.  Anyone running a real
mail system should be capable of arranging for a correct PTR in the DNS
-- if they aren't then they have no business at the controls of a MTA.

As far as I know, the FreeBSD.org mailers don't pay much attention to
SPF -- generally the accepted practice seems to be to use SPF as part of
computing Spam scores, but not to make accept/reject decisions solely
based on SPF.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   7 Priory Courtyard
  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matt...@infracaninophile.co.uk   Kent, CT11 9PW



signature.asc
Description: OpenPGP digital signature