Verisign bogosity {Scanned by HJMS}

[Remco Barendse]

No, the access file is very flexible. I use the access file to block some
domains for in and outgoing mail.

I think that any entry in access will block in and outgoing mail by
default. If you want to block outgoing mail to a domain only the line is:
To:bladiebla.com                REJECT

I haven't tested it yet but suspect that the lookup of the senders domain
would return the verisign ip which would consequently be blocked by the
reject line

On Tue, 16 Sep 2003, Furnish, Trever G wrote:

> > -----Original Message-----
> > From: Remco Barendse [mailto:mailscanner at BARENDSE.TO]
> > Sent: Tuesday, September 16, 2003 10:16 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Verisign bogosity {Scanned by HJMS}
> >
> >
> > Would it help to put their ip address in our /etc/mail/access list on
> > REJECT? This will at least prevent mail from domains that do
> > not resolve or that resolve to verisign is rejected, right??
>
> What would that rule look like?  I think using the access file you can only
> match against the ip address a connection is made from, not the ip address
> that the sender domain resolves to...?
>