--On Monday, October 09, 2006 17:29:23 -0400 Tim
<tim-forensics (at) sentinelchicken (dot) org [email concealed]> wrote:

>> Its purpose is to reject *all* mail from bogus MTAs - dialups,
>> misconifigured servers, MTAs that aren't registered in the domains' DNS
>> as a "legal" MX, MTAs that don't reverse properly, etc., etc. If the
>> email is forged in any way, it will never make it to DATA.
>
> That's great, except it makes the internet more expensive for the little
> guy. If you're trying to run a non-spamming personal mailserver off of
> a consumer DSL or cable line, you can get screwed by others' policies
> like this because you may not have control over your PTR records or how
> your ISP lists you as a non-MTA with other organizations.
>
> Sure, argue that the little guy should just shell out for a better line,
> but if he could, he wouldn't be the little guy.
>
It wouldn't hurt to actually read how it works before criticizing it.

Policyd-weight (the name implies what it does) provides a weighted score to
each "bad" thing an MTA does. The *cumulative* score is what matters. It
also *subtracts* points for good things that an MTA does. So, the
situation you describe should not be a problem.

If you want to test that, send a test message to geek (at) stovebolt (dot) com [email concealed], and
see if it gets rejected. If it does, look at the headers to see what it
did.

Paul Schmehl (pauls (at) utdallas (dot) edu [email concealed])
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
0?ñ *?H?÷

 ?â0?Þ

10 +0 *?H?÷


 ?Þ0?÷0?` 
ú½?Íá^Á±ÀØÌ?þ0
 *?H?÷


0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0
060831000000Z
070831235959Z0ô1'0%U
The University of Texas System1-0+U$The University of Texas at Dallas CA1F0DU=www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)9910UMail Stop - UTD10UPaul Schmehl1!0 *?H?÷


pauls (at) utdallas (dot) edu0 [email concealed]?
"0
 *?H?÷



?
0?

?

Ów?|?9î±\<?R??$]Êa,ÌZ??h¾b""ØÉ???5w
õ&&²#?=é°?¦t
b¨hg6ÆØÁ<SWõúI?×U
P+ÓøhjËeDéû?¿f¹HÕMôèN4ÆÙE?Uc?l«p ~? N)r/á&bxÐÞn=Âë?U?K½H°ßIÂ-m*_¼_?/ÐÞ?¸aÛÜý!Ç?>?ø?YCs?vÎ?6#EËÛÐå
?Ó:­?Þ?lØ?)?G?Æ3?éæD}LÏüßÛ+?É`Ê?û¡k??Y®4§y¸zϐ?â\úºýë?

£?0?0 U00U0pauls (at) utdallas (dot) edu0 [email concealed]?
$U ?
0?
0?
`?H
?øE

0?
0++

https://www.verisign.com/rpa-
kr0Ò+
0ÅÂNOTICE: Private key may be recovered by VeriSign's customer who may be able to decrypt messages you send to certificate holder. Use is subject to terms at https://www.verisign.com/rpa-kr (c)99.0 `?H
?øB

?0uUn0l0j h f?dhttp://onsitecrl.verisign.com/TheUnive
rsityofTexasSystemTheUniversityofTexasatDallasCA/LatestCRL.crl0U
?0U%0+
+
0
 *?H?÷


{yÙtÿà1aæ?GÄ MÍ]û÷¬MÕª?=ÀÒTPÍ´±Æà76e¾¥
¦^BäEß]_Úïjn@màïD¨ê?Ý%Ë¥ü`8í@ZñI¢?Bn °:ê­½?åA¦vSÙË^ºZA>É?t0îF?æOjÈ?¿Í¹°Q+mÓ0?Ø0?A 
Aì=§?ÄöÕÝÑe0
 *?H?÷


0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0
990331000000Z
090330235959Z0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0?0
 *?H?÷



0?¿êï?ë
Áù"ÁÑÁÌÛzÚ¾6Òp`0`åàS/5ôɨ)ÖÞ=ó?d}¾Ñ?Tx?ÿ¢xñû?«Ãü?LÂIA
áÀÒ¥×ü~ÿBQNtó
Õhs¥]1øæ)%c¨#?Dj?°9ñïÛFXú¸ÏKózÁ¢I??#Cº?2?

£¥0¢0
)U"0 ¤010UPrivateLabel1-1400 `?H
?øB


0DU =0;09`?H
?øE


0*0(+

https://www.verisign.com/RPA0U
0

ÿ
0U
0
 *?H?÷


S µÜ²¶?Ñ P?É8yÜȲI¿¸S?o?̲äz|ü£è_a^_??ZÒ?
"ñ¼íñT¶T¦T¡T¼iÇ!7¢?9?§¬ ?è?]?
H9Y?$ C¼??Ü?táæã¾j¤?11#%?¯º,Q?Y¦£?Ò´ÎT0?0?l¹/`Ì??¡zF ¸[pl?¯0
 *?H?÷


0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0
980518000000Z
280801235959Z0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0?0
 *?H?÷



0?§?
!t,çð?á?<!ñ?Û?é?ü¾_RÈÌ,V,¸
i,Ì?­°?®yò9Á{?º
,èÂ?,ªié ôÇ©¤BÂ#OJØð¢û1lÉæo?'õæôLx?mëF?ú¹?ÉTò²Ä¯ÔFZÉ0ÿ
lõ-mÎw

0
 *?H?÷


r.ùÑñqûÄ?öÅ^Q?@?¸hø??Ø❽ÿí¡æfê/ ôÊ×ê¥+?ö$`?MD.?¥Ä- Ó®xiorÚl®ðc?7æ»Ä0­wÌI5ªÏ؏Ѿ·?GsjT"4d-¶?Y[´QY:³
ôßg ô­2d^±Fr'?{ÅD´®1?Û0?×

0ÿ0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CAú½?Íá^Á±ÀØÌ?þ0 + ±0 *?H?÷

1 *?H?÷


0 *?H?÷

1
061009223314Z0# *?H?÷

1Ñ!3/ÒЫØ/µöÂîüiL@Ò0R *?H?÷

1E0C0
*?H?÷
0*?H?÷
?0
*?H?÷

@0+0
*?H?÷

(0
 *?H?÷



?
¡U?<üçªÜõ??ùÅ%füåyÞ6?Euo¥605?÷`?ZÓ/< ©\ж£¼(?O«ü¥ÏØ?¨?ÝO,8@Ø\ 7¤àQW·G?³¼ü[ú?òcïvÍ??,wkàøõÔ
?Åé?gãf9ci¿"ñ??äbðB]£?Ü?g¶,z?5¼Rè?ý´!g,÷1Æn2ç¾:?ùÌápÈÊæMI?Ó ?
²ä???/ïs`M(Ùéݽü??½H{ØÈÉ?Öí)pÙÏ*/º©K
«Êgt?7?-ø¼©DÝ£¤YÖÊ¥ÚÎ2???ñ?

[ reply ]