Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Sep 2002 21:04:41 -0700
From:      Andy Sparrow <spadger@best.com>
To:        Mike Tibor <tibor@tibor.org>
Cc:        MikeM <myraq@mgm51.com>, freebsd-stable@FreeBSD.ORG, Andy Sparrow <spadger@best.com>, Heywood Jblome <provencial1@yahoo.com>
Subject:   Re: Possible trojan since upgrade 
Message-ID:  <20020929040441.8105683@CRWdog.demon.co.uk>
In-Reply-To: Message from Mike Tibor <tibor@tibor.org>  of "Sat, 28 Sep 2002 19:11:35 -0800." <20020928190840.L24511-100000@xena.mikey.net> 

next in thread | previous in thread | raw e-mail | index | archive | help
--==_Exmh_712530192P
Content-Type: text/plain; charset=us-ascii

> On Sat, 28 Sep 2002, MikeM wrote:
> 
> > Do you mean the MX with the higher number, rather than lower number?
> > For my domain, my backup MX is priority 100, my main MX is priority 0.
> > Or do I have these critters set up backwards?

Nope, you're good. 

BTW, I seem to recall that the Cricket Liu DNS book (might be the 
Sendmail "Bat" book though) still advises not using an MX value of 0 for 
the primary, due to some (unspecified, IIRC), broken MTAs.

Never seen it cause a problem myself though...

> Yep--Andy means the lower priority MX host, which is the higher numbered.

Heh, my original post was rather confusing. Thanks, that was exactly 
what I meant.

> I hadn't given much thought to it, but his message makes a lot of sense.
> Personally, I can think of three clients off the top of my head who don't
> bother to pay much attention to backup MX hosts, but who think it's
> critically important to secure they're primary.

Well, there's ratware that'll hit those backup MX hosts first, usually 
just the highest-numbered, IIRC.

Probably won't be much of an issue while there's still N zillion 
unsecured proxies in the world on broadband connections, or telcos with 
unresponsive abuse desks hosting spammers in emerging countries. Jeez, I 
can't even /read/ >75% of the spam I get these days, and a lot of the 
English slime I get is actually hosted overseas...

Cheers,

AS



--==_Exmh_712530192P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)
Comment: Exmh version 2.5 07/13/2001

iD8DBQE9lnvYPHh895bDXeQRAoB5AKC1X1vd2tixFc43Yfw2sEHnHhr5agCgn+PL
Z2X7FEqsF4cuM+fK0rcDQ38=
=BDWr
-----END PGP SIGNATURE-----

--==_Exmh_712530192P--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020929040441.8105683>