email attack

[David A. Bandel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 20 Sep 2003 15:46:54 -0400 (EDT)
Gerry Doris <gerry at dorfam.ca> wrote:

[snip]
> 
> By the way, for those running sendmail here's a couple of rules that
> are working really well...these also stop the Verisign nonsense.  Put
> the following in your sendmail.mc file and then run the m4 macro and
> restart sendmail.
> 
> The gaps after the Left Hand Side entries MUST be tabs.  Make sure to
> put the rest of the verbage all on one line (the \'s just indicate the
> line wrapped).
> 
> LOCAL_RULESETS
> SLocal_check_relay
> R$*     $: $&{client_resolve}
> 
> RTEMP   $#error $@ 5.7.1 $: "550 Access Denied ; Incomplete DNS.
> Cannot \ resolve PTR record for " $&{client_addr}" Please have your
> system \ administrator correct the zone entries."
> 
> RFORGED $#error $@ 5.7.1 $: "550 Access Denied ; Incomplete DNS. IP \
> name possibly forged " $&{client_name}" Please have your system \
> administrator correct the zone entries."
> 
> RFAIL   $#error $@ 5.7.1 $: "550 Access Denied ; Incomplete DNS. \
> Hostname lookup failed for " $&{client_name}" please have your system
> \ administrator correct the zone entries."


That should kill a lot of mail from my servers as well.  Over 6 months
ago I was assigned the block 64.116.183.x by my upstream, who got it
from WorldCom/MCI who got it from ARIN.  Six months of screaming and
tracing a reverse anywhere on that block goes back to ... Verisign! 
Because the incompetent morons in this part of the world CAN'T SEEM TO
FIGURE OUT HOW TO DELEGATE A REVERSE ZONE -- THAT MEANS YOU ARIN!!!!

I'm so damn tired of incompetence and stupidity and loosing customers
because of it.  Anyone got a phone number for ARIN?  My e-mail to them
bounces!!!!

Ciao,

David A. Bandel
- -- 
Focus on the dream, not the competition.
		Nemesis Racing Team motto
GPG key autoresponder:  mailto:david_key at pananix.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFADr7Tj31PLQNUbV4RAuWiAJ9e1KElEAOgLkIu5nLqZImC+Oft8wCgrBQ8
N4SK+D3WdXx6r6TNpTgBi3k=
=Gj0n
-----END PGP SIGNATURE-----