On 25/10/18 11:12, Viktor Dukhovni wrote:
>> On Oct 25, 2018, at 5:55 AM, Allen Coates <znab...@cidercounty.org.uk> wrote:
>>
>> There are some anti-spam projects which offer MXes for your use.
>> You set one up with the LOWEST prioity (your "MX of last resort"); If a
>> message reaches it, the MX will collect stats
>> and then return a TEMPFAIL.
>
> I can't recommend this either. You're directing some fraction of
> your email for delivery attempts to a third party. They may get
> to log envelope sender and recipient addresses for any traffic
> that comes their way. The traffic may well be legitimate, if
> your primary servers are briefly unreachable or tempfail resolution
> of the sending domain. If you're doing DANE, you now need DANE
> support on the honeypots, ...
>
> My advice is to run a decent mail plant with no kludges. Instead
> I see a non-trivial fraction of folks creating fake MX hosts with
> an address of "1.1.1.1" or other addresses they are "sure" won't
> accept email. This is all a bad idea. The benefits are marginal
> at best. Don't do it.
>
I will go along with that. I have no actual experience of these anti-spam
schemes, I've only read about them.
Superficially they sound like a good idea, but I seem to be getting along quite
well without them :-)
Postscreen is far and away the best "add-on" I have encountered to date.
