>AFAIK, SIMS does not do a reverse look-up on the connecting IP address. It
>only does a forward look-up on the domain name claimed in the HELO/EHLO
>argument (karabalta.kg in this case). If it resolves to an address that
>matches the connection, then SIMS marks it as 'verified'. That is apparently
>not the case here (since karabalta.kg. resolves to 192.168.0.1 not
>195.38.186.2), so it's unclear to me why SIMS would mark it as verified. That
>would seem to be erroneous.

Good point. It might appear though, based on this example, that SIMS 
does not cross check the A record that is returned against the 
connecting IP, only that -some- A record is returned. If true, then 
SIMS might at least put a check in for obviously bogus A records (in 
this example, a private IP) and note such.

Or are there hidden issues I'm unaware of?

Feature request?


Stefan Jeglinski

#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to