- Test - lists.nanog.org

Secondary MX user list filter for Sendmail
by Todd Vierling 19 May '04

19 May '04

A colleague asked me offlist about how to make a Sendmail secondary MX properly return 550 for invalid recipient addresses. For smaller sites -- or even larger sites if the list is autogenerated and the access_db uses "btree" storage (it's rather fast) -- the below solution will do just that. ===== In your secondary MX's sendmail.mc, add the following FEATUREs if you don't already have them. FEATURE(`access_db')dnl FEATURE(`blacklist_recipients')dnl Rebuild your sendmail.cf from this, and then put entries like the following in your /etc/mail/access file (assuming "foo.com" is your domain). I'm also assuming that "foo.com" is already in /etc/mail/relay-domains (or /etc/mail/sendmail.cR depending on your sendmail install), so that relayed mail can get through. userone(a)foo.com RELAY usertwo(a)foo.com RELAY To:foo.com "550 User unknown" The RELAY lines designate explicitly allowed recipient addresses for relaying to the primary MX. The To:...550 line, which requires the "blacklist_recipients" feature, is a fallback rule that matches after the email addresses and returns the expected "User unknown" error. Now rebuild your access.db file, restart sendmail, and voila, you have a secondary MX explicit user list. -- -- Todd Vierling <tv(a)duh.org> <tv(a)pobox.com>

2 1

Goddard SFC
by Jason McCormick 19 May '04

19 May '04

If anyone at Goddard Space Flight Center (gsfc.nava.gov) is on the list, can you please contact me off-list about an e-mail blocking issue? -- Jason McCormick jason(a)devrandom.org GPG Fingerprint: 66C5 2B15 3E34 2B5E 5321 6147 303A DCE6 0A74 A19C

1 0

Re: Barracuda Networks Spam Firewall
by Valdis.Kletnieks＠vt.edu 19 May '04

19 May '04

On Tue, 18 May 2004 14:31:21 CDT, Steve Drees said: > if I 0wn your mail gateway I can generate a list of valid accounts over > time. On a busy host over a short period of time. So your auditor wouldn't mind if you kept an unencrypted list of credit card numbers on a DMZ box, because if somebody hacks the box they can gather those over time? :)

8 20

Suppressed Routes AS30174 & 17090 ?
by P.Schroebel 19 May '04

19 May '04

Hello Folk, I was wondering if in-fact any of our routes are being suppressed either via our ASN 30174 or any of our ip space 66.164.0.0/16 or 66.79.96.0/20. Given and Granted that we have had rotten history of sorts. However, we really have cleaned up our networks and rid ourselves of all vermin, spammers, spam-hosters, spam related affiliates and were are working with authorities; helping out where we can. Therefore, if in-fact we were being suppressed, null routed or otherwise black-holed either via ip or ASN. Then, I would apprieciate if this could resolved by the removal of any such suppressions. Best Regards, Peter

1 0

Re: Off-Topic: Sunday night beer @ Zeitgeist, NANOG31
by Hannigan, Martin 19 May '04

19 May '04

Thers also a Saturday night gathering at www.dnalounge.com Mail me direct for info. Thanks. Regards, -- Martin Hannigan (c) 617-388-2663 VeriSign, Inc. (w) 703-948-7018 <http://www.verisign.com/> -----Original Message----- From: owner-nanog(a)merit.edu <owner-nanog(a)merit.edu> To: Rob Nelson <ronelson(a)vt.edu>; Jeff Rizzo <riz(a)boogers.sf.ca.us>; nanog(a)merit.edu <nanog(a)merit.edu> Sent: Sun May 16 12:39:46 2004 Subject: RE: Off-Topic: Sunday night beer @ Zeitgeist, NANOG31 > Rob Nelson > Um. State, City, Zip Code? :) California, San Francisco, 94103-1117 Michel.

2 1

PGP Key Signing in San Francisco
by Joe Abley 19 May '04

19 May '04

There will be a PGP Key Signing Party at the NANOG 31 meeting in San Francisco, which will also include a very brief tutorial on what key signing is all about, which I hope will make things go even more smoothly than usual :-) When: Monday 24 May 2004, 9pm Where: Italian Room Foyer, just outside the Colonial Room Before 6pm on the day of the keysigning, you need to mail me with your public keys, or (preferably) add your public keys directly to the NANOG 31 keyring using the following URL: http://www.biglumber.com/x/web?keyring=3554 For full details, see <http://www.nanog.org/pgp.html>, or drop me a note. Joe

1 0

Judge Dismisses Claim in VeriSign's ICANN Case
by Henry Linneweh 19 May '04

19 May '04

http://www.eweek.com/article2/0,1759,1594815,00.asp

1 0

Re: Barracuda Networks Spam Firewall
by John Neiberger 18 May '04

18 May '04

>>> "Jared B. Reimer" <jared(a)theriver.com> 5/17/04 2:48:16 PM >>> >We have done an eval of this same product (model 400). It is very cool in >virtually every regard except one: performance. We were facing 1+ hour >mail delays (!) through the device when pumping less than 1,000,000 >messages per day through it. Given that they claim it can handle ten >times that much, I am left wondering what happened. Very disappointing in >that regard; the eval unit is being shipped back as a result. -- Jared Did you not receive some basic support from them during your evaluation? A perceived 90% drop in performance is pretty significant and I'd imagine that they'd be interested in helping to determine the cause. John --

8 9

Level3/AT&T Problems Today
by Marius Strom 18 May '04

18 May '04

Anyone else seeing problems with packets going between ATT and L3? Just starting a few minutes ago (looks like the problem is in their Dallas peering point) If you're in a position to do something about it and need more info, drop me a line and I'll get you traceroute's, IP examples, etc.. -- /-------------------------------------------------> Marius Strom | Always carry a short length of fibre-optic cable. Professional Geek | If you get lost, then you can drop it on the System/Network Admin | ground, wait 10 minutes, and ask the backhoe http://www.marius.org/ | operator how to get back to civilization. \-------------| Mike Andrews |-------------------->

1 0

Re: CiSCO IOS 12.* source code stolen
by Joe Shen 18 May '04

18 May '04

Hi, What makes me excited at this news is, is there a chance to learn details of IOS which may be one of most successful protocol implementations. And, if such code is available to both college and engineers it will surelly do good to our life. So, I'll be glad to see the releasing of those codes as what happened to Microsoft. Joe >Some years ago I was arguing with my then department head (whom I have >the greatest respect for, it should be said) at Cisco that IOS should >be turned open source. Needless to say, the suggestion was met with >"some" resistance, mildly speaking. ---- Msg sent via Spymac Mail - http://www.spymac.com

5 6