sendmail uses ident be default 

I have no idea how the other major MTAs handle this, but sendmail seems to issue an ident-auth-request on each connect it gets.

As i think this is rather useless, as most hosts don't answer it, and, even if they would, the answer is easily fakeable, i switched it off.

adding

define(`confTO_IDENT', `0')dnl

to /etc/mail/sendmail.mc disables this. Sadly this isn't documented, for confTO_IDENT it only states
The timeout waiting for a response to an IDENT query.


thanks goes to http://sial.org/howto/sendmail/tips/

addendum: 'Your Name' in the comments is right. ident is still of some use on multiuser-systems to the local admin. But in the field of Internet-mailservers it is useless.
[ 1 comment ] ( 1166 views ) permalink related link
Analysis of subscribed Domains on Debian-Listserver. 

From time to time we have the problem that a mail posted to a list triggers an autoresponse (vacation, bounce, tdma) from an unexpected source. Sometimes it isn't possible to identify the subscriber who is causing this. One example for this was 'petsupermarket'.

So i wrote a small tool, which takes Mailadresses as input and resolves the domains until it reaches IP-level, so it is possible to identify 'related' addresses to such an incident.

I now ran this tool for all 38656 domainparts mailadresses that are currently subscribed to some list at our listservers:

Unresolveable Domains                             :   443
Grounded Domains : 3
Domains with A : 1058
Domains with CNAME, A : 59
Domains with CNAME, CNAME, A : 3
Domains with MX, A : 36202
Domains with MX, CNAME, A : 1199
Domains with MX, CNAME, CNAME, A : 22
Domains with MX, CNAME, CNAME, CNAME, A : 5
Domains with MX, PTR : 36
Domains with unresolvable Hosts : 361


(You may have noticed that those lines doesn't sum up to 38656. It is possible to have more than one MX-Host, and it is also possible to have more than one IP in an A-Record. If one of those combinations falls into another category it is counted twice)

so we have 36528 domains that are completely configured correctly according to RfC 2821 with a MX-Record pointing to an A-Record, or without a MX-Record and an A-Record. These are 94.5% of all domains.

but we have 443 domains in our list, that didn't resolve at the moment i ran my script, those have to be investigated.

We also have 3 domains that are configured with 'IN MX 0 .' as decribed in this expired Draft, those also have to be investigated, and thrown out.

We have 1288 domains, which use CNAMEs (or CNAMEs pointing to CNAMEs) in their MX or directly on their domainname. RFC1034 says:

Domain names in RRs which point at another name should always point at the primary name and not the alias. This avoids extra indirections in accessing information.


then there are 36 domains which point their MX directly to an IP-Number. RFC 1035 says:

3.3.9. MX RDATA format

+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
| PREFERENCE |
+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+
/ EXCHANGE /
/ /
+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+

where:

PREFERENCE A 16 bit integer which specifies the preference given to
this RR among others at the same owner. Lower values
are preferred.

EXCHANGE A <domain-name> which specifies a host willing to act as
a mail exchange for the owner name.

MX records cause type A additional section processing for the host
specified by EXCHANGE.


So according to that an MX has to point explicitely to a Full Qualified Domain Name, and it has to be an A-Record it points to.

However: Most MTAs (including ours) these days forgive this, and figure out the right thing.

At last: we have 361 Domains which MX and/or CNAME-Records point to Hostnames that are currently unresolvable. A quick check shows that often the problems only appear on one MX-Record, while another is correct, so the service is functional.

So maybe now it is a good idea and check your own DNS-Setup and the Mail-related Data.
[ add comment ] ( 646 views ) permalink
Die Fußballergebnisse vom Wochende (7.-10.9.2007) 

Fortuna Düsseldorf - SC Verl               3:0
Sprockhövel - FC Gütersloh 2000 1:3
VfB Gelsenkirchen 2 - Falke Gelsenkirchen 0:6
Viktoria Resse 2 - SV Westfalia Schalke 2:0
Viktoria Resse 3 - SV Westfalia Schalke 2 11:0
1. FC Isselhorst G1 - SV Avenwedde G2 9:0

[ add comment ] ( 520 views ) permalink
GeoCache #100 


Heute habe ich den 100ten Cache gefunden. (aktueller Stand)

Angefangen habe ich diesen 'Sport' als kleinen Ausgleich fürs tägliche >8h 'Fernsehen gucken', und es ist mir auch noch nicht langweilig geworden.

Die Verbindung von 'Durch-die-Gegend-laufen' und elektronischen Tools (sowohl der GPS-Empfänger, als auch selbstgeschriebene Tools auf dem heimischen Rechner zur Planung) ist immer noch interessant.

Meine bevorzugte Cache-Art sind Multi-Caches, also Aufgaben über mehrere Stationen, idealerweise an interessanten Orten, z.B. First OWL (unbedingt auf den alten Funkturm steigen!).

Das ist es auch was mich bisher davon abgehalten hat selber einen Cache zu legen: Das was mich an anderen Caches stört (Ignoranz der Geocaching-Spielregeln, Schrauben in Bäume, Legen ohne Absprache mit den Grundstückseigentümern und/oder bei Ignoranz von Verbotsschildern) möchte ich nicht machen, und da ist mir eben die interessante Lokation und Idee nicht gekommen... nun mal gucken...
[ add comment ] ( 519 views ) permalink related link
Die Fussballergebnisse vom Wochenende (31.8.-2.9.07) 


Schalke 04 - Bayer Leverkusen 1:1
MSV Duisburg - Arminia Bielefeld 3:0
SC Paderborn - FCE Aue 0:1
VfB Luebeck - SC Verl 0:3
FC Guetersloh 2000 - Sf Oestrich 5:1
Falke Gelsenkirchen spielfrei
SV Westfalia Schalke - SC Schaffrath 2 2:4
SV Westfalia Schalke II - AS G'kirchen II 2:18
SV Avenwedde G2 - FC Kaunitz G Kaunitz nicht angetreten.

[ add comment ] ( 455 views ) permalink

<<First <Back | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | Next> Last>>