* Steve <steve.h...@digitalcertainty.co.uk>: > Hello 'list'; > This is my first time out in 'list' land so please don't flame me if I > get the format wrong. Coaching and constructive criticism is fine ;-) > {usenet group seems to be almost dead ?} > > I've recently noticed that my Postfix is being a naughty bunny. It is > attempting to query my ISP nameserver to reverse resolve LAN addresses > defined in my_networks.
Of course. It tries to resolve the IP address of all clients connecting. > The queries look like this; > 19-May-2009 7:26:56.489 client <wan_ip>#12345: query: > 60.1.168.192.in-addr.arpa IN PTR + Yes. > Which in turn gives this; > security: warning: client <wan_ip>#12345: RFC 1918 response from > Internet for 60.1.168.192.in-addr.arpa The security warning is broken. Turn it off. -- Ralf Hildebrandt Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.computerbeschimpfung.de Für spezielle Leute den Schwiegermutter-Modus, eine keifende Stimme, die schreit: "Und ich habe Dir doch gesagt, Du sollst einen Backup machen. Aber Du hörst ja nie auf mich."