check_dynamic_reverse_dns Common vs Full

There will always be opinions, both good and bad on how MagicSpam protection, rules and policies are used, and what the defaults should be. Different environments may have different needs. We try to find the perfect balance, and that is not always easy. Just remember that we have to satisfy millions of users.. not just one person.

Moderators: wizard, magicspam

Post Reply
dadeitch
Posts: 13
Joined: Tue Nov 18, 2014 8:00 am

check_dynamic_reverse_dns Common vs Full

Post by dadeitch » Tue Jan 26, 2016 9:29 am

I notice, in the new version, that the single check_dynamic_reverse_dns rule has been replaced by two rules:
check_dynamic_reverse_dns (FULL)
check_dynamic_reverse_dns_default (COMMON)

What are the differences in these new rules? I had to disable the previous check_dynamic_reverse_dns rule due to too many poorly set up email servers affecting our customers mail delivery. I'm curious if the the rule spit would make it possible to re-apply some of the dynamic reverse dns protections.

Thanks

magicspam
Posts: 1014
Joined: Tue Oct 28, 2008 2:27 pm

Re: check_dynamic_reverse_dns Common vs Full

Post by magicspam » Tue Jan 26, 2016 10:55 am

Hello dadeitch,

Thank you for your post.

In the new version, the check_dynamic_reverse_dns rule was split into two precisely because of the issue you encountered in the past.

The FULL list (check_dynamic_reverse_dns) is for catching confirmed dynamic style PTRs and could be considered "less sensitive", for example 192-168-2-1.dyna.isp.com or d-1-2-3-4.adsl.isp

The COMMON REGEX (check_dynamic_reverse_dns_default) uses a broader rule to identify dynamic PTR formats,
for example business-ip-23.co2.d1.someisp.nl or adsl-d1-344.someisp.bv

Just like you suggest, you can try the FULL list which should protect from spam sources on the most common dynamic addresses which are usually compromised home computers etc.

Please let us know if you have any questions.
Last edited by magicspam on Wed Feb 10, 2016 1:08 pm, edited 1 time in total.
Reason: Our initial description of the two options were reversed
-- MagicSpam Support Team --

dadeitch
Posts: 13
Joined: Tue Nov 18, 2014 8:00 am

Re: check_dynamic_reverse_dns Common vs Full

Post by dadeitch » Tue Jan 26, 2016 2:43 pm

awesome, thanks. I'll give it a try and see if there are issues.

magicspam
Posts: 1014
Joined: Tue Oct 28, 2008 2:27 pm

Re: check_dynamic_reverse_dns Common vs Full

Post by magicspam » Tue Mar 22, 2016 10:37 am

You are welcome dadeitch.

Please let us know if you have any other questions.
-- MagicSpam Support Team --

Post Reply

Return to “Discussions on Spam Protection Policies and Default Rules”

Who is online

Users browsing this forum: No registered users and 3 guests