Changes in Version 4.77.10-1

[Scott Silva]

on 6-12-2009 10:01 AM Gary Faith spake the following:
> I was reading the changelog from the website for Version 4.77.10-1.  I
> like the addition of the host:host.domain.com in rules but I have a
> situation where the forward and the reverse names are not going to match
> because of dynamic IPs.  I can control the forward DNS via DynDNS but I
> can't control the reverse DNS.  Can the "spoofing protection" (#9 below)
> be turned off?
> 
> 8 Implemented a new type of line in rulesets. When you specify a "From:"
> rule, you can use a syntax like "host:hostname.domain.com" to use the
> SMTP client's hostname instead of the numerical IP address. This can
> also be partial hostnames or domain names, such as "host:domain.com" or
> include wildcards anywhere, such as "host:mail*.dom*ain.com", or even
> Perl regular expressions such as "host:/(de|dk)$/". This goes where the
> numerical IP address would go in the rule, after the "From:" and before
> the value to return. Note that these are slightly slower than using the
> IP address as they involve a DNS lookup (maximum of once per message),
> but that value should be in your DNS cache as other things will have
> already had to look it up anyway. They are described in more detail in
> the etc/rules/README and etc/rules/EXAMPLES files.
> 
> 9 Added spoofing protection to the "host:" name lookups. Forward and
> reverse DNS entries must now match.
> 
> Thanks,
> 
> Gary
> 
Don't use them?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090612/f6b41405/signature.bin