Re: educating rDNS violators

From: Eric Brown (ericbrow_at_ziplip.com)
Date: 08/24/04

  • Next message: Ivan Groenewald: "RE: Securing web site with redundancy ?"
    Date: Mon, 23 Aug 2004 16:55:49 -0700 (PDT)
    To: <SMiller@unimin.com>, <security-basics@securityfocus.com>
    
    

    Hello all,
    I will admit, I thought I knew enough about DNS to get it working. I managed to send and recieve mail to myself from all the domains I managed. I could get to the right website. I ran into a domain that did exactly as Scott mentions here. The sysadmin for this domain was no help at all, and quite rude about it. It turned out it wasn't a problem with my DNS servers, but my upstream provider. They had to add a PTR entry to their DNS, so that all of our class C IP's mapped back to us.

    I'm certain that I don't know all I should about being a sysadmin. I do know I enjoy it a lot. I think this list is one of the best places to educate people like myself.

    That's my 2 cent anyway.
    Eric

    > -----Original Message-----
    > From: SMiller@unimin.com [mailto:SMiller@unimin.com]
    > Sent: Monday, August 23, 2004, 9:51 AM
    > To: security-basics@securityfocus.com
    > Subject: educating rDNS violators
    >
    >
    >
    >
    >
    > Our mail administration group recently implemented blocking of all incoming
    > messages from domains that cannot be resolved via reverseDNS, for purposes
    > of spam prevention. Of course, there are quite a number of legitimate
    > business contacts who do not have rDNS properly configured. Assuming that
    > the rDNS criterion remains, the question becomes one of who will notify
    > and/or educate the sender(s) about this issue. The only time-efficient way
    > that I can think of to do this would be to have instructions and references
    > in the body of the bounce message itself. Anyone tried that? Results?
    > Other suggestions? Thanks in advance.
    >
    > Scott
    >
    >
    > ---------------------------------------------------------------------------
    > Computer Forensics Training at the InfoSec Institute. All of our class sizes
    > are guaranteed to be 12 students or less to facilitate one-on-one
    > interaction with one of our expert instructors. Gain the in-demand skills of
    > a certified computer examiner, learn to recover trace data left behind by
    > fraud, theft, and cybercrime perpetrators. Discover the source of computer
    > crime and abuse so that it never happens again.
    >
    > http://www.securityfocus.com/sponsor/InfoSecInstitute_security-basics_040817
    > ----------------------------------------------------------------------------
    >

    To do is to be. -Socrates
    To be is to do. -Satre
    Do be do be do. -Sinatra

    ---------------------------------------------------------------------------
    Computer Forensics Training at the InfoSec Institute. All of our class sizes
    are guaranteed to be 12 students or less to facilitate one-on-one
    interaction with one of our expert instructors. Gain the in-demand skills of
    a certified computer examiner, learn to recover trace data left behind by
    fraud, theft, and cybercrime perpetrators. Discover the source of computer
    crime and abuse so that it never happens again.

    http://www.infosecinstitute.com/courses/computer_forensics_training.html
    ----------------------------------------------------------------------------


  • Next message: Ivan Groenewald: "RE: Securing web site with redundancy ?"

    Relevant Pages

    • Re: unable to join domain from dmz
      ... there is no real reason to have WINS services on a DMZ. ... > interaction with one of our expert instructors. ... learn to recover trace data left behind ...
      (Security-Basics)
    • RE: a tool like nestat
      ... interaction with one of our expert instructors. ... Gain the in-demand skills of ... a certified computer examiner, learn to recover trace data left behind by ...
      (Security-Basics)
    • Re: a tool like nestat
      ... > interaction with one of our expert instructors. ... Gain the in-demand skills of ... > a certified computer examiner, learn to recover trace data left behind by ...
      (Security-Basics)
    • RE: a tool like nestat
      ... interaction with one of our expert instructors. ... Gain the in-demand skills of ... a certified computer examiner, learn to recover trace data left behind by ...
      (Security-Basics)
    • Re: a tool like nestat
      ... interaction with one of our expert instructors. ... Gain the in-demand skills of ... a certified computer examiner, learn to recover trace data left behind by ...
      (Security-Basics)