* Steve <steve.h...@digitalcertainty.co.uk>:
> Hello 'list';
> This is my first time out in 'list' land so please don't flame me if I
> get the format wrong. Coaching and constructive criticism is fine ;-)
> {usenet group seems to be almost dead ?}
> 
> I've recently noticed that my Postfix is being a naughty bunny. It is
> attempting to query my ISP nameserver to reverse resolve LAN addresses
> defined in my_networks.

Of course. 
It tries to resolve the IP address of all clients connecting.

> The queries look like this;
> 19-May-2009 7:26:56.489 client <wan_ip>#12345: query: 
> 60.1.168.192.in-addr.arpa IN PTR +

Yes.

> Which in turn gives this;
> security: warning: client <wan_ip>#12345: RFC 1918 response from
> Internet for 60.1.168.192.in-addr.arpa

The security warning is broken. Turn it off.

-- 
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Für spezielle Leute den Schwiegermutter-Modus, eine keifende
Stimme, die schreit: "Und ich habe Dir doch gesagt, Du sollst
einen Backup machen. Aber Du hörst ja nie auf mich."

Reply via email to