--On Monday, October 09, 2006 16:28:24 -0600 Brent Kearney
<brent (at) kearneys (dot) ca [email concealed]> wrote:
>
> Some university campuses maintain strict control over their reverse DNS
> entries, and so departments or on-campus organizations, research
> institutes, etc. that run their own mail servers will have non-matching
> forward and reverse DNS entries on their MX hosts. Blocking rules like
> this make life difficult for them as well.
>
I would submit to you that any university that doesn't reverse all
internet-facing hosts needs to hire new people to handle DNS. It doesn't
take a brain surgeon to write pointer records.

Having said that, read my response to Tim to see why that's not necessarily
a problem. Or better yet, read the link I sent rather than assuming how
the program works.

> Cases such as these raise the question, if the blocked mail never gets
> into your network, how would you know about the rate of false-positives?
>
Very simple. Anyone whose email bounces complains to me personally at a
known good address on a separate domain. So far I've had one complaint,
and I simply adjusted the scoring to overcome the stupidity of his ISP.

Obviously, my brief description wasn't meant to fully explain how
policyd-weight works. Read the docs. It's far from a brute-force tool to
reject email.

Paul Schmehl (pauls (at) utdallas (dot) edu [email concealed])
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
0?ñ *?H?÷

 ?â0?Þ

10 +0 *?H?÷


 ?Þ0?÷0?` 
ú½?Íá^Á±ÀØÌ?þ0
 *?H?÷


0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0
060831000000Z
070831235959Z0ô1'0%U
The University of Texas System1-0+U$The University of Texas at Dallas CA1F0DU=www.verisign.com/repository/CPS Incorp. by Ref.,LIAB.LTD(c)9910UMail Stop - UTD10UPaul Schmehl1!0 *?H?÷


pauls (at) utdallas (dot) edu0 [email concealed]?
"0
 *?H?÷



?
0?

?

Ów?|?9î±\<?R??$]Êa,ÌZ??h¾b""ØÉ???5w
õ&&²#?=é°?¦t
b¨hg6ÆØÁ<SWõúI?×U
P+ÓøhjËeDéû?¿f¹HÕMôèN4ÆÙE?Uc?l«p ~? N)r/á&bxÐÞn=Âë?U?K½H°ßIÂ-m*_¼_?/ÐÞ?¸aÛÜý!Ç?>?ø?YCs?vÎ?6#EËÛÐå
?Ó:­?Þ?lØ?)?G?Æ3?éæD}LÏüßÛ+?É`Ê?û¡k??Y®4§y¸zϐ?â\úºýë?

£?0?0 U00U0pauls (at) utdallas (dot) edu0 [email concealed]?
$U ?
0?
0?
`?H
?øE

0?
0++

https://www.verisign.com/rpa-
kr0Ò+
0ÅÂNOTICE: Private key may be recovered by VeriSign's customer who may be able to decrypt messages you send to certificate holder. Use is subject to terms at https://www.verisign.com/rpa-kr (c)99.0 `?H
?øB

?0uUn0l0j h f?dhttp://onsitecrl.verisign.com/TheUnive
rsityofTexasSystemTheUniversityofTexasatDallasCA/LatestCRL.crl0U
?0U%0+
+
0
 *?H?÷


{yÙtÿà1aæ?GÄ MÍ]û÷¬MÕª?=ÀÒTPÍ´±Æà76e¾¥
¦^BäEß]_Úïjn@màïD¨ê?Ý%Ë¥ü`8í@ZñI¢?Bn °:ê­½?åA¦vSÙË^ºZA>É?t0îF?æOjÈ?¿Í¹°Q+mÓ0?Ø0?A 
Aì=§?ÄöÕÝÑe0
 *?H?÷


0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0
990331000000Z
090330235959Z0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CA0?0
 *?H?÷



0?¿êï?ë
Áù"ÁÑÁÌÛzÚ¾6Òp`0`åàS/5ôɨ)ÖÞ=ó?d}¾Ñ?Tx?ÿ¢xñû?«Ãü?LÂIA
áÀÒ¥×ü~ÿBQNtó
Õhs¥]1øæ)%c¨#?Dj?°9ñïÛFXú¸ÏKózÁ¢I??#Cº?2?

£¥0¢0
)U"0 ¤010UPrivateLabel1-1400 `?H
?øB


0DU =0;09`?H
?øE


0*0(+

https://www.verisign.com/RPA0U
0

ÿ
0U
0
 *?H?÷


S µÜ²¶?Ñ P?É8yÜȲI¿¸S?o?̲äz|ü£è_a^_??ZÒ?
"ñ¼íñT¶T¦T¡T¼iÇ!7¢?9?§¬ ?è?]?
H9Y?$ C¼??Ü?táæã¾j¤?11#%?¯º,Q?Y¦£?Ò´ÎT0?0?l¹/`Ì??¡zF ¸[pl?¯0
 *?H?÷


0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0
980518000000Z
280801235959Z0Á10 UUS10U
VeriSign, Inc.1<0:U3Class 2 Public Primary Certification Authority - G21:08U1(c) 1998 VeriSign, Inc. - For authorized use only10UVeriSign Trust Network0?0
 *?H?÷



0?§?
!t,çð?á?<!ñ?Û?é?ü¾_RÈÌ,V,¸
i,Ì?­°?®yò9Á{?º
,èÂ?,ªié ôÇ©¤BÂ#OJØð¢û1lÉæo?'õæôLx?mëF?ú¹?ÉTò²Ä¯ÔFZÉ0ÿ
lõ-mÎw

0
 *?H?÷


r.ùÑñqûÄ?öÅ^Q?@?¸hø??Ø❽ÿí¡æfê/ ôÊ×ê¥+?ö$`?MD.?¥Ä- Ó®xiorÚl®ðc?7æ»Ä0­wÌI5ªÏ؏Ѿ·?GsjT"4d-¶?Y[´QY:³
ôßg ô­2d^±Fr'?{ÅD´®1?Û0?×

0ÿ0ê1'0%U
The University of Texas System10UVeriSign Trust Network1;09U2Terms of use at https://www.verisign.com/rpa (c)991200U)Class 2 CA - OnSite Individual Subscriber1-0+U$The University of Texas at Dallas CAú½?Íá^Á±ÀØÌ?þ0 + ±0 *?H?÷

1 *?H?÷


0 *?H?÷

1
061009223841Z0# *?H?÷

1f?ïnÄX·vR#Ó?$Ù)Øñ?â0R *?H?÷

1E0C0
*?H?÷
0*?H?÷
?0
*?H?÷

@0+0
*?H?÷

(0
 *?H?÷



?
GÓ»a?|ÕÔ?Ã???)߬KT^1b<Nr?KÈ(ºÿZzþÛk^ ldh(4§£?6²bR¾t §Å¿!$ËqÉ÷?fïAb­I]®N%¢
Qùà?ÐK6Ûp?>Ø-iF´ø¾Qñ?º@ÊÄ?ó%0ÆÆ q;ÁºµÎaSº¥?ÊïLÝ[ÝïÂ8ÇÂ??
?~t>Ѳµl©ÞóîGo?a·?ï-?Äký?#?éÊt_WïlN¯Ác²»hã^¨:³B$ãáûï?V8?oóª??@êÁ
ùm$¨Oºæqã·?¸Ú?zbG¸äÑÊE¸ÝÊ~?zëÆ
|09

[ reply ]