> Matus UHLAR - fantomas wrote:
> > 181.188.252.222.in-addr.arpa domain name pointer localhost.
> > 
> > That is why FcRDNS is being used everywhere...
> > 
> > localhost has address 127.0.0.1 => fail.

On 03.06.09 19:31, Adam Katz wrote:
> Actually, localhost doesn't resolve via DNS; it has no A record, nor
> any other record type.  It resolves locally without using DNS; see
> your /etc/hosts file.  Similarly, 1.0.0.127.in-addr.arpa. has no PTR
> record indicating it should be called localhost.

actually, many recursive DNS servers have configured zone for "localhost" by
default and for "0.0.127.in-addr.arpa" or "127.in-addr.arpa".

However if anything doesn't resolve, MTA should not accept/use it.
 
> > if anyone uses reverse DNS name without forward-confirming it, it's their
> > own fault and they can take all consequencies from such stupid setup. afaik
> > some reverse-checking services are more strict about invalid than about
> > nonexisting hostnames. And I recommend to behave like that.
> > 
> > SA (usually) uses hostname passed by MTA, so if an MTA is affected by this
> > bug, blame MTA, not SA. And I'm not sure if the hostname is used by any
> > checks that would cause positive (oor lower negative) score.
> 
> Sadly, too many servers are set up improperly in this context, so I
> doubt I'm in the minority when I say that I don't use this metric to
> single-handedly block mail.

I was only talking that SA does not resolve IPs but hostnames are taken from
Received: headers (there was an exception for MTA that does not resolve DNS)
so the MTA not the SA should be blamed if the "hostnames" are not correct
(forward confirmed).

> > Maybe SPF, I expect someone to comment on this...
> 
> Same problem as above: "localhost" is not actually a domain.

> $ host -t TXT localhost.

I was not talking about localhost, but about SPF resolution. The TXT must be
of course taken from DNS, but if the record contains "A:" etc, it can be
compared to resolved hostname in Received: header.

And by the sentence above I meant that someone who understands the SPF
should comment this issue.
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I wonder how much deeper the ocean would be without sponges. 

Reply via email to