Hi,

On Wed, 26 May 2004 18:04:46 +0200 "Bruno Broedner" <[EMAIL PROTECTED]> wrote:

> Sure, you are right with what you said about dialup-host. These german 
> T-Online
> host addresses ending on ...t-dialin.net are dynamic dial-up connections, and
> they belong also to DSL flatrate connections and therefore some guys are 
> online
> for 24 hours or more and have enought time to spam the world from that IP
> (singlehop, with their own SMTP engines!)
> 
> So it is ok to give a score to that IPs with SpamAssassin, but rejecting 
> emails
> (Postfix) on basis of this RBL-listing would be no good idea, because the same
> IP is used by many other dial-up users to send their normal emails (multihop,
> via the T-Online SMTP servers, like the received-trail show in my first 
> posting)

Then again, unless you are running the SMTP servers for T-Online, you
shouldn't let Postfix accept mail from any dial-up (dynamic) users, at
least not on port 25. If you absolutely need to allow remote users to
inject mail into your system, they should do it via SMTP AUTH on port
587.

It's increasingly obvious that users should not be able to connect to
port 25, anywhere, ever.

> ...but I think we are going of-topic in this list here.. ;-)

Yeah. We could take this over to SPAM-L but we'd have to insult each
other for six posts until someone else points out we're agreeing with
each other. :P

-- Bob

Reply via email to