The postifx log says:
"RCPT from unknown[202.70.195.135]"
Regardless of the results from dig, doesn't the above log entry mean
that postfix is unable to find an rdns entry for this IP and that
No, in this case it means that forward confirmation of the PTR failed.
An "unknown" host in logs is still determined the same way it always
was.
Suppose I'm a bad guy (not a big leap of imagination) and I owned
202.70.195.0/24. And I set the PTR for 202.70.195.135 as
"security.cnysupport.com." Would you want your logs to say ...
"RCPT from unknown[202.70.195.135]"
... or ...
"RCPT from security.cnysupport.com[202.70.195.135]" ??
That makes more sense. Thanks!
Terry
