Henrik K wrote:
Less info only if you are running a sad MTA, that doesn't properly resolve. I guess the SOHO rule is exception,
That was what I meant. :-)
Check for IP in hostname? Does anyone have actual stats, that it's somehow better than a generic \d+-\d+ regex or whatever? Sometimes it's just better to KISS.
I don't have any stats now, but I use a similar check in our selective grey listing and once checked stats for that.
There was a clear difference (catching more fqdns with fewer FPs) when I changed from a simple check to a more complex one.
(Comparing the fqdn with the IP address allows you to match patterns that might otherwise lead to FPs.)
Regards /Jonas -- Jonas Eckerman, FSDB & Fruktträdet http://whatever.frukt.org/ http://www.fsdb.org/ http://www.frukt.org/
