Thousands of ssh probes

Randal L. Schwartz merlyn at stonehenge.com
Sat Mar 6 16:26:58 UTC 2010


>>>>> "Matthew" == Matthew Seaman <m.seaman at infracaninophile.co.uk> writes:

Matthew> On the whole, I don't see the value in having a high-numbered MX to
Matthew> dumbly accept, queue and forward messages like this.

High-numbered MX came from a time where an internal machine could
only be delivered from outside via an external gateway.  If you want
to deliver to internal.example.com, you tried its lowest MX first,
and failing to connect, you fall back to the next MX, external.example.com.
The idea is that external.example.com would then be able to see
the next hop, and forward the mail.

The modern recommendation is to avoid MX altogether, and rely on split-horizon
DNS and SMTP delivery reattempts.  But a lot of people are still stuck in the
old ways.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn at stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>
Smalltalk/Perl/Unix consulting, Technical writing, Comedy, etc. etc.
See http://methodsandmessages.vox.com/ for Smalltalk and Seaside discussion


More information about the freebsd-questions mailing list