Block Reverse DNS failures or not?

[Ken Stieers]

Hey guys,

Philosphical question, which I honestly didn't think I'd have to ask...

Do you block messages from servers that fail reverse DNS lookup (eg no pointer record or non matching pointer record)?

We recently tightened things up, and put those in the blacklist, and I'm seeing more legit senders getting dropped than I expected.

Am I expecting too much?

Ken

[ravi saini]

You can enable these three checkbox in the sendergroup BLACKLIST:

-Connecting host PTR record does not exist in DNS.

-Connecting host PTR record lookup fails due to temporary DNS failure.

-Connecting host reverse DNS lookup (PTR) does not match the forward DNS lookup (A).

Be aware for the False positives.

[Ken Stieers]

Ravi, 

I know how to do it.  That wasn't what I was asking... 

I was asking more of a "What do others do?" question from other users of the product...not an answer from TAC. 

Ken