RE: Verisign broke my dns WAS RE: [cobalt-users] Speaking of Stopping Spam

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> 
> Wouldn't a sendmail.cf hack be preferable?
> 
> Calling any sendmail experts...
> 
> how do we configure sendmail to check for 64.94.110.0 as the 
> IP for the aname, then reject mail from any such domain?
> 

Someone posted this mc code to compl.mail.sendmail. If someone could
translate it to sendmail.cf and where to paste, a lot of us would be
grateful:

LOCAL_CONFIG
Kbestmx bestmx -z/
Khostip dns -RA

LOCAL_RULESETS
SLocal_check_mail
R$*                     $: $>canonify $1
R<@>                    $@ <@>
R$*<@$*.>               $: $1<@$2>              strip the trailing . if 
present
R$*<@$+>                $: $2 $| $>CheckBrokenVerisign $2
R$* $| $#$*             $#$2
R$+ $| $*               $: $1 $| $>CheckBadMX $( bestmx $1 $) /
R$* $| $#$*             $#$2

SCheckBrokenVerisign
R$*                     $: $(hostip $1 $)
R64.94.110.11           $#error $@ 5.5.4 $: "550 Real domain name
required for sender address"
R127.0.0.1              $#error $@ 5.5.4 $: "550 Real domain name
required for sender address"

SCheckBadMX
R$* / $*                $>CheckThisMX $1 / $2

SCheckThisMX
R$* / $*                $: $(hostip $1 $) $| $2
R127.0.0.1 $| $*        $#error $@ 5.5.4 $: "550 sender does not resolve
to a replyable domain"
R$* $| $*               $@ $2

The large spaces are of course tabs, and watch for line wraps.
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.