[Mimedefang] ANNOUCEMENT: Net::validMX v2.2.0 now available.

David F. Skoll dfs at roaringpenguin.com
Fri Jun 2 07:09:37 EDT 2006


Kevin A. McGrail wrote:

> Also 192.168.X.X is fine if the MX records also contains internet
> accessible addresses.  So:

> munged.com IN MX 25 [legit ip]
> munged.com IN MX 10 [privatized ip]

I disagree.  If you publish a 192.168.x.x record as a public MX, you
have no idea where your mail will go.  What happens if on Customer X's
network, someone sets up a malicious server at 192.168.x.x that
intercepts all outgoing mail and replaces it with inflammatory mail?

IMO, any domain that publishes *any* bogus MX record should be rejected.

Regards,

David.



More information about the MIMEDefang mailing list