[77707] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Time to check the rate limits on your mail servers

daemon@ATHENA.MIT.EDU (Nils Ketelsen)
Thu Feb 3 09:58:52 2005

Date: Thu, 3 Feb 2005 09:54:00 -0500
From: Nils Ketelsen <nils.ketelsen@kuehne-nagel.com>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <bb0e440a050203041213c11704@mail.gmail.com>; from ops.lists@gmail.com on Thu, Feb 03, 2005 at 05:42:07PM +0530
Errors-To: owner-nanog-outgoing@merit.edu


On Thu, Feb 03, 2005 at 05:42:07PM +0530, Suresh Ramasubramanian wrote:

> One additional thing that I think wasnt mentioned in the article -
> Make sure your MXs (inbound servers) are separate from your outbound
> machines, and that the MX servers dont relay email for your dynamic IP
> netblock. Some other trojans do stuff like getting the ppp domain name

That, on the other hand, gets you into trouble with rather stupid Spam
filters, that only accept mails from a server, if that server is also
MX for the senders domain.

Yes, this is stupid, but that does not change the fact, that these
setups are out there.

Nils

home help back first fref pref prev next nref lref last post