Re: Do NOT try rDNS Whitelisting

2010-11-09 Thread John Levine
>Sadly, the opendkim library does not support applying two signatures in >parallel (set up two signing contexts, pass the message content through >once, get two sigatures). So I have to pass the message through the >library twice, to apply two signatures. Not a show-stopper, but annoying. If we as

Re: Do NOT try rDNS Whitelisting

2010-11-09 Thread Victor Duchovni
On Tue, Nov 09, 2010 at 03:34:09AM -, John Levine wrote: > >Does it make sense in your view to use the "From:" domain to sign > >*all* mail, and not add that domain to the DNSWL, while reserving > >a sub-domain (that never matches "From:") for the good senders, and > >applying a *second* signa

Re: Do NOT try rDNS Whitelisting

2010-11-08 Thread John Levine
>> Do NOT look up rDNS in the DWL. If you do, you will get random >> results, since we have no idea what rDNS our clients use. > >Noted. The feature is not SpamHaus specific, and other WLs may support >rDNS domains, but we should perhaps add a note in the docs about SpamHaus, >since your list will

Re: Do NOT try rDNS Whitelisting

2010-11-08 Thread Victor Duchovni
On Sat, Nov 06, 2010 at 02:48:03AM -, John Levine wrote: > Do NOT look up rDNS in the DWL. If you do, you will get random > results, since we have no idea what rDNS our clients use. Noted. The feature is not SpamHaus specific, and other WLs may support rDNS domains, but we should perhaps add

Re: Do NOT try rDNS Whitelisting

2010-11-05 Thread John Levine
My apologies for shouting, but this wrong idea just won't go away: > If Postfix can't determine the client's reverse domain >(tempfail) and therefore cannot even ask SpamHaus whether the >(verified) client (PTR) domain is on the whitelist, NO! NO, NO, NO! Do NOT look up rDNS in the DWL. If