fixing insecure email infrastructure (was: Re: [eweek article] Window of "anonym

Thu Jan 13 16:51:24 UTC 2005

on Thu, Jan 13, 2005 at 12:21:04PM +0100, Stephane Bortzmeyer wrote:
> 
> On Wed, Jan 12, 2005 at 10:59:43AM -0500,
>  Steven Champeon <schampeo at hesketh.com> wrote 
>  a message of 98 lines which said:
> 
> > 1) any legitimate mail source MUST have valid, functioning,
> > non-generic rDNS indicating that it is a mail server or
> > source. (Most do, many do not. There is NO reason why not.)
> 
> Since this list is NANOG, it is reasonable that it has a North
> American bias but remember the Internet is worldwide. I do not know
> how it is in the USA but there are many parts of the world where ISP
> do not have a delegation of in-addr.arpa and therefore cannot pass it
> to their customers. (It is also common to have many levels of ISP, so
> you need to go through many layers before reaching the RIR.)

Seems this needs to be fixed, then. Not my problem.

> Requesting rDNS means "I don't want to receive email from Africa".

See above.

-- 
hesketh.com/inc. v: +1(919)834-2552 f: +1(919)834-2554 w: http://hesketh.com
join us!   http://hesketh.com/about/careers/account_manager.html    join us!