Mark Goodge:
> On 11/07/2011 15:02, ??? ?????? wrote:
> >
> > Easy!
> > Fix the software that your trusted users use to add their domain. Make
> > THAT software check that the domain's MX record points to the right
> > place BEFORE you actually add it to the database.
>
> That's not actually helpful, because if you want to avoid any
> interruption to mail delivery you have to add the domain to the new
> destination server before you alter the MX to point it there.
It might work, if the system has an out-of-band "approval" procedure
for domains that trigger exceptions (e.g., domain does not (yet)
exist, domain MX does not point to our server, etc.).
Such exceptions could be reviewed by a trusted human, and once
verified to be OK, they could go through.
I think that all domain modifications should be approved by a
trusted human, but then I'm not paying for all this stuff.
Wietse
