Aiko Barz wrote, On 05/27/2007 02:22 PM:
> Hi,
>
> would you think, it is a good idea to use AUTHREQUIRED in combination
> with known dial up networks? Something like this:
>
> 127.0.0.1:allow,RELAYCLIENT=""
> :allow,SMTPAUTH="",SANITYCHECK="",REJECTEXEC="",RETURNMXCHECK="",RCPTCHECK="",SENDERCHECK="",RBL="",LOGLEVEL="3"
> # Arcor - DSL - 88.70.0.0 - 88.70.195.255
> 88.70.0.:allow,AUTHREQUIRED="",SMTPAUTH="",SANITYCHECK="",REJECTEXEC="",RCPTCHECK="",LOGLEVEL="3"
> 88.70.1.:allow, ...
>
> Mailservers should have static IP-addresses. So, they should not
> be within those networks. If there are some of my users, they are
> going to use smtp-auth anyway. If there are users from different
> providers, I will get those mails via their providers.
>
> Bye,
> Aiko
>
> PS.:
> There are customers with synchronous DSL and static IP addresses. Are
> those customers normally within those dynamic IP ranges or do they use
> different networks which are exclusively for them?
Hello Aiko
On my server most unwanted connections are coming from overseas, thus
keeping track of all dynamic ip addresses worldwide is far too much work
for a single admin.
Maybe the Policy Block List (http://www.spamhaus.org/pbl/) is amore
efficient way for achieving the same.
Regards
Alain
|