> On Oct 25, 2018, at 5:55 AM, Allen Coates <znab...@cidercounty.org.uk> wrote:
>
> There are some anti-spam projects which offer MXes for your use.
> You set one up with the LOWEST prioity (your "MX of last resort"); If a
> message reaches it, the MX will collect stats
> and then return a TEMPFAIL.
I can't recommend this either. You're directing some fraction of
your email for delivery attempts to a third party. They may get
to log envelope sender and recipient addresses for any traffic
that comes their way. The traffic may well be legitimate, if
your primary servers are briefly unreachable or tempfail resolution
of the sending domain. If you're doing DANE, you now need DANE
support on the honeypots, ...
My advice is to run a decent mail plant with no kludges. Instead
I see a non-trivial fraction of folks creating fake MX hosts with
an address of "1.1.1.1" or other addresses they are "sure" won't
accept email. This is all a bad idea. The benefits are marginal
at best. Don't do it.
--
--
Viktor.
