connection refused by 127.0.0.1

[Dhawal Doshy]

Kevin Miller wrote:
> JD Doelitzsch wrote:
>> Im getting alot of messages filling up my logs with status deferred
>> connection refused by 127.0.0.1 why would MS send to its loopback?
>> and why wouldn't it accept it?
>>
>> -JD
> 
> Don't know if it's the case here, but check the domain.  I had a case
> some time ago where the spammer had a MX records in their DNS that
> resolved to 127.0.0.1 so any reply mail/bounces, etc. would never leave
> the server.  Pretty sleazy.  I blacklisted the domain in sendmail's
> access table.  May be something similar going on here...
> 
> ...Kevin

Umm.. why not reject sender domains, where the MX record points (yeah 
yeah MX records point to A records, which point to IP addresses 
whatever) to an invalid entry like 
192.168.x.x/10.x.x.x/172.168.x.x/127.x.x.x/224.x.x.x

Postfix lets me do this using a cidr map for the 
'check_sender_mx_access' parameter, i'm sure a sendmail milter can do 
some thing similar.

2 units of your local currency,
- dhawal