If the value of that record matches 127.*.*.1 (PCRE /^127\.\d = 4 " in mtx_ to be the reverse of your MTX_PASS score. The Bind DNS server syntax for these record is:Ĥ0.152.71.64. (You also need to have a DNS PTR record for the IP defining the host name, but you should already have that.)įor IPv6, the IP is reversed in the same manner as reverse DNS (PTR) records, just like IPv4. Just one DNS "A" record for each transmitting mail server, with a value of "127.0.0.1" in the format:įor a server with IP 64.71.152.40 and hostname (DNS PTR record), it is: This wizard, given a mail server IP address, will generate MTX DNS records in BIND server syntax, and check the condition of existing MTX records. Expected to be easy to handle with included blacklisting functionality. More people will be encouraged to create their MTX records.ĭetriment: Small chance of spammers getting past SpamAssassin by using MTX. Use MTX plugin for SpamAssassin for whitelisting onlyīenefits: Legitimate mail from people using MTX is more likely to correctly pass SpamAssassin. Recommendations at This Time Create your MTX records to whitelist your mail serversīenefit: Mail from your servers is less likely to be classified as spam.
![spamassassin dns score spamassassin dns score](https://blogthehiveproject.files.wordpress.com/2020/08/spamassassin_long.png)
It is easier to maintain a Blacklist of Whitelist abusers than either a complete Whitelist or Blacklist.It is yet easier to allow others to maintain their own entries on the Whitelist on the authority of IP address ownership (DNS PTR record delegation).It is easier to maintain a Whitelist than a Blacklist due to many fewer entries.Sending Error Messages for False Positives
![spamassassin dns score spamassassin dns score](https://www.lifewire.com/thmb/Rh75d--wPe4zgh__9QnYlp-usCc=/960x640/filters:fill(auto,1)/spamassassin-5c1130b3c9e77c0001ce1ffb.jpg)
MTX records are just one DNS "A" record for each of your transmitting mail server IP addresses, on your own DNS servers.Ī distributed DNS whitelist, requiring both IP and domain ownership.