[prev in list] [next in list] [prev in thread] [next in thread] 

List:       postfix-users
Subject:    Re: Google rejecting IPv6 mails
From:       Dominik George <nik () naturalnet ! de>
Date:       2013-10-13 19:17:13
Message-ID: 20131013191712.GB5499 () keks ! naturalnet ! de
[Download RAW message or body]


> > http://blog.gmane.org/gmane.os.miros.general/month=20131001
> 
> WRT the first point in the blog post, Thorsten is incorrect.  Google
> does publish lists of their outbound IPs via their SPF records.
> 
> ~$ dig txt _netblocks.google.com _netblocks2.google.com

Sure, but how would you reliably whitelist them? We got information
directly from a Google lackey that this list may change at any time
because of their way to deploy servers, and I have not heard of a way to
dynamically whitelist all SPF-allowed MXs in, let's say, postgrey. You
can whitelist sender, recipients or client - now, whitelisting a sender
domain is not helpful because any domain might be Google hosted. There
is, in fact, no reliable lsit of *all* mail hosts that will ever (as in,
for a long time in the future) be the sending MTAs of Google-hosted
domains.

-nik

-- 
<burny> Ein Jabber-Account, sie alle zu finden; ins Dunkel zu treiben
        und ewig zu binden; im NaturalNet, wo die Schatten droh'n ;)!

PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]