Block Local Addresses from External Sender Alltogether (DoNoSpoofing,
default=score)
is a nice option with posiblility of scanning From header. However if
you run system where users can "park" (add) any domain to the you
server (this) configuration it is possible that someone will add on
purpose some exteral domain just to block senders at this domain from
reaching mailboxes at your server... (thats why at MTA I run
delivieres by dns rather than list of localdomains)
It would be far better to check IP under first/any mx record at sender
domain and compare it to list of your servers IPs (as specified by
assp admin) and only do this blocking if this test fails... Of course
this is additional dns traffic even if you use dns cacheing - assp
might want to implement caching here on its own...

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to