Sendmail 8.14.0 is out

[Jeff A. Earickson]

On Mon, 5 Feb 2007, Julian Field wrote:

> Date: Mon, 05 Feb 2007 18:34:26 +0000
> From: Julian Field <MailScanner at ecs.soton.ac.uk>
> Reply-To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> To: MailScanner discussion <mailscanner at lists.mailscanner.info>
> Subject: Re: Sendmail 8.14.0 is out
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Randal, Phil wrote:
>> 	CONFIG: New FEATURE(`badmx') to reject envelope sender addresses
>> 		(MAIL) whose domain part resolves to a "bad" MX record.
>> 		Based on contribution from William Dell Wisner.
>>
> Sorry for being lazy, but can someone define "bad" please?

Per the features README:

badmx       Reject envelope sender addresses (MAIL) whose domain part
         resolves to a "bad" MX record.  By default these are
         MX records which resolve to A records that match the
         regular expression:

         ^(127\.|10\.|0\.0\.0\.0)

         This default regular expression can be overridden by
         specifying an argument, e.g.,

         FEATURE(`badmx', `^127\.0\.0\.1')

         Note: this feature requires that the sendmail binary
         has been compiled with the options MAP_REGEX and
         DNSMAP.

In googling around, I saw where others got a bit fancier:

^(127\.[0-9]+\.[0-9]+\.[0-9]+|10\.[0-9]+\.[0-9]+\.[0-9]+|172\.20\.[0-9]+\.[0-9]+|192\.168\.[0-9]+\.[0-9]+)$

So, it looks like unroutable/private address blocks per RFC 1918.

Jeff Earickson
Colby College