Re: [OT] Bogus MX opinions

2008-02-22 Thread Richard Frovarp
Marc Perkel wrote: Mark Johnson wrote: Marc Perkel wrote: Because there is occasionally some server doing something very weird you might have to open up port 25 one some specific IP who is running something really dumb. I think I've had to do this only once or twice. But once you open

Re: [OT] Bogus MX opinions

2008-02-21 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Scheidell schrieb: | Postini uses it for their clients. | | They set up 4 'real' mx records (priority 100,200,300,400) that point to | real postini servers. They set up priority 500 that points to the | (firewalled) smtp server of the

Re: [OT] Bogus MX opinions

2008-02-21 Thread Richard Frovarp
Marc Perkel wrote: Michael Scheidell wrote: Didn't qmail have a problem if it hit a 'dead' primary mx server first? Qmail has a problem if it gets a 421 on the lowest MX. But if the lowest MX is totally dead Qmail is fine with it. We issue tcp-reset via iptables and have never heard

Re: [OT] Bogus MX opinions

2008-02-21 Thread Marc Perkel
Richard Frovarp wrote: We issue tcp-reset via iptables and have never heard of any problems. Doing this also makes connecting servers fail out quickest, instead of waiting to timeout. Interesting. How do you do that?

Re: [OT] Bogus MX opinions

2008-02-21 Thread Richard Frovarp
Marc Perkel wrote: Richard Frovarp wrote: We issue tcp-reset via iptables and have never heard of any problems. Doing this also makes connecting servers fail out quickest, instead of waiting to timeout. Interesting. How do you do that? -A ports_deny -d de.st.i.p -p tcp -m tcp --dport 25

Re: [OT] Bogus MX opinions

2008-02-21 Thread David B Funk
On Wed, 20 Feb 2008, Aaron Wolfe wrote: Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as your primary MX

Re: [OT] Bogus MX opinions

2008-02-21 Thread Marc Perkel
David B Funk wrote: On Wed, 20 Feb 2008, Aaron Wolfe wrote: Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as

Re: [OT] Bogus MX opinions

2008-02-21 Thread Marc Perkel
Mark Johnson wrote: Marc Perkel wrote: Because there is occasionally some server doing something very weird you might have to open up port 25 one some specific IP who is running something really dumb. I think I've had to do this only once or twice. But once you open up port 25 to the

Re: [OT] Bogus MX opinions

2008-02-21 Thread Mark Johnson
Marc Perkel wrote: I'm using Exim and I have it listening on several IP addresses. If you aren't using Exim then you'll have to get someone to help you. defercondition = ${if match{$interface_address}{69.50.231.160}} You could just point it to a dead IP address which is the simple way

Re: [OT] Bogus MX opinions

2008-02-21 Thread Marc Perkel
Mark Johnson wrote: Marc Perkel wrote: I'm using Exim and I have it listening on several IP addresses. If you aren't using Exim then you'll have to get someone to help you. defercondition = ${if match{$interface_address}{69.50.231.160}} You could just point it to a dead IP address

Re: [OT] Bogus MX opinions

2008-02-21 Thread Mark Johnson
Marc Perkel wrote: Because there is occasionally some server doing something very weird you might have to open up port 25 one some specific IP who is running something really dumb. I think I've had to do this only once or twice. But once you open up port 25 to the problem user you solved

Re: [OT] Bogus MX opinions

2008-02-21 Thread mouss
Marc Perkel wrote: David B Funk wrote: On Wed, 20 Feb 2008, Aaron Wolfe wrote: Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a

Re: [OT] Bogus MX opinions

2008-02-21 Thread Michael Scheidell
I guess just customers who want a fall back in case postini goes down. host -t mx hormel.com hormel.com mail is handled by 100 hormel.com.mail5.psmtp.com. hormel.com mail is handled by 200 hormel.com.mail6.psmtp.com. hormel.com mail is handled by 300 hormel.com.mail7.psmtp.com. hormel.com mail

Re: [OT] Bogus MX opinions

2008-02-20 Thread Richard Frovarp
mouss wrote: Francesco Abeni wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean

Re: [OT] Bogus MX opinions

2008-02-20 Thread Aaron Wolfe
Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as your primary MX nolisting.org - longterm use has yet to yield a single

Re: [OT] Bogus MX opinions

2008-02-20 Thread mouss
Richard Frovarp wrote: We do something like nolisting. You will lose legit mail no matter which trick you use. So it's best if you have a method of fixing that. Our first mx record is a real smtp server, it's just firewalled off to most of the world. It's used as a fast lane for our internal

Re: [OT] Bogus MX opinions

2008-02-20 Thread Richard Frovarp
mouss wrote: Richard Frovarp wrote: We do something like nolisting. You will lose legit mail no matter which trick you use. So it's best if you have a method of fixing that. Our first mx record is a real smtp server, it's just firewalled off to most of the world. It's used as a fast lane

RE: [OT] Bogus MX opinions

2008-02-20 Thread Bowie Bailey
Aaron Wolfe wrote: Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as your primary MX nolisting.org - longterm

RE: [OT] Bogus MX opinions

2008-02-20 Thread Bowie Bailey
Richard Frovarp wrote: mouss wrote: Richard Frovarp wrote: We do something like nolisting. You will lose legit mail no matter which trick you use. So it's best if you have a method of fixing that. Our first mx record is a real smtp server, it's just firewalled off to most of

Re: [OT] Bogus MX opinions

2008-02-20 Thread Richard Frovarp
Bowie Bailey wrote: I completely agree with you. I have no idea what effect our solution is having on spam. I know that our internal mail isn't slowed down by large influxes of spam as they can't get to the server that processes internal mail, which was the goal of our system. I know for a

Re: [OT] Bogus MX opinions

2008-02-20 Thread Kevin W. Gagel
- Original Message - Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as your primary MX I can't disagree with

Re: [OT] Bogus MX opinions

2008-02-20 Thread Marc Perkel
Let me clarify something about using bogus MX records. Let's assume the following. bogus0.domain.com - MX 10 real.domain.com - MX 20 backup.domain.com MX 30 bogus1.domain.com MX 40 bogus2.domain.com MX 50 The host bogus1 and bogus2 are 100% safe and effective. The bogus IPs can be dead on

RE: [OT] Bogus MX opinions

2008-02-20 Thread Robert - elists
Quotes from this thread (and the nolisting site which was posted as a response): Michael Scheidell - Do NOT use a bogus mx as your lowest priority. Bowie Bailey - I would say that it is too risky to put a non-smtp host as your primary MX nolisting.org - longterm use has yet to

Re: [OT] Bogus MX opinions

2008-02-20 Thread mouss
Marc Perkel wrote: Let me clarify something about using bogus MX records. Let's assume the following. bogus0.domain.com - MX 10 real.domain.com - MX 20 backup.domain.com MX 30 bogus1.domain.com MX 40 bogus2.domain.com MX 50 The host bogus1 and bogus2 are 100% safe and effective. The bogus IPs

Re: [OT] Bogus MX opinions

2008-02-20 Thread SM
At 08:05 20-02-2008, Aaron Wolfe wrote: I am interested in this technique, and have been for some time. It seems like every discussion of it leads to a group saying you will lose mail and a group saying you will not lose mail. Is there any In my opinion, it may cause mail delivery problems.

Re: [OT] Bogus MX opinions

2008-02-20 Thread Michael Scheidell
Postini uses it for their clients. They set up 4 'real' mx records (priority 100,200,300,400) that point to real postini servers. They set up priority 500 that points to the (firewalled) smtp server of the client. (as in firewalled to the world, except to postini) Works great. Spammers hitting

Re: [OT] Bogus MX opinions

2008-02-20 Thread Marc Perkel
Michael Scheidell wrote: Didn't qmail have a problem if it hit a 'dead' primary mx server first? Qmail has a problem if it gets a 421 on the lowest MX. But if the lowest MX is totally dead Qmail is fine with it.

RE: [OT] Bogus MX opinions

2008-02-19 Thread Thomas Raef
Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low priority MX record

Re: [OT] Bogus MX opinions

2008-02-19 Thread Michael Scheidell
From: Francesco Abeni [EMAIL PROTECTED] Date: Tue, 19 Feb 2008 11:55:59 +0100 To: users@spamassassin.apache.org Subject: [OT] Bogus MX opinions Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to

Re: [OT] Bogus MX opinions

2008-02-19 Thread Francesco Abeni
Thomas Raef ha scritto: (...) I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low priority MX record which points at a non-smtp server. I'd like to know some first-hand experience about two questions.

RE: [OT] Bogus MX opinions

2008-02-19 Thread Bowie Bailey
Francesco Abeni wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low

Re: [OT] Bogus MX opinions

2008-02-19 Thread Francesco Abeni
Bowie Bailey ha scritto: Francesco Abeni wrote: (...) I'd like to implement a Bogus MX ... I would say that it is too risky to put a non-smtp host as your primary MX. There are some servers which will have a problem with that setup and either be unable to deliver mail to you or delay the

RE: [OT] Bogus MX opinions

2008-02-19 Thread Bowie Bailey
Francesco Abeni wrote: Bowie Bailey ha scritto: Francesco Abeni wrote: (...) I'd like to implement a Bogus MX ... I would say that it is too risky to put a non-smtp host as your primary MX. There are some servers which will have a problem with that setup and either be unable to

RE: [OT] Bogus MX opinions

2008-02-19 Thread James E. Pratt
-Original Message- From: Francesco Abeni [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 19, 2008 11:12 AM To: users@spamassassin.apache.org Spamassassin Subject: Re: [OT] Bogus MX opinions Something else that can be useful is using an MTA blacklist. I use the zen.spamhaus.org

Re: [OT] Bogus MX opinions

2008-02-19 Thread mouss
Francesco Abeni wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low

Re: [OT] Bogus MX opinions - YES - it works!

2008-02-19 Thread Marc Perkel
Thomas Raef wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low