Alessandro Vesely via Dng <dng@lists.dyne.org> wrote:

>> IIRC the specific complaint wasn't that they checked for rDNS, but that they 
>> matched it against the domain of the sender. That makes no sense at all, it 
>> prevents running more than one domain on one mail server.

> Why would it?  A configurable mail server, Courier-MTA for example, lets you 
> use multiple domains and multiple IPs.

You mean, like in the web hosting days before hostname headers where you needed 
a different IP address for each hosted domain name ? That's very 20th century 
and not a luxury most of us have.

> However, unless you send many thousands messages per day, I would suggest to 
> stick to one domain name and one outgoing IP address.

There's no problem running mail for multiple domain names through one mail 
server, as you say, just a matter of setting the MX records for each domain and 
configuring the server. But as I recall how I read the message that kicked this 
subthread off, a couple of ISPs were checking the sender domain of the email 
against teh DNS name for the mail server - so for example if I were to use one 
of my other email addresses, they would reject mail because the sender domain 
(i.e. not thehobsons.co.uk) didn't match the domain name of the mail server in 
the DNS (patsy.thehhobsons.co.uk) -that's just plain dumb.

> And it is key to get an IP address without poorly reputed neighbors —check 
> talosintelligence.com.

I have no choice over the neighbours !

> As Mark said, it does make deliverability easier to send via one established 
> SMTP server.

It depends on your criteria. In my experience, it can easily be the reverse - 
especially if that email server isn't really really tight on controlling what 
it's users send.

>> I also use lack of rDNS as a check. I also check it for obvious 
>> misconfigurations like (from memory) : it's an IP literal (not allowed by 
>> RFC),
> 
> Currently, the RFC allows anything in the HELO name.

Without looking it up, I'm sure there are some constraints. In any case, there 
are some thing it makes sense to block - so-one else should be running a mail 
server and claiming to be in my domain, stuff like that. Some basic protocol 
checks block a good proportion of spam - and very cheaply in terms of resources 
needed.

Simon

_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to