DNS Issues

Try not to put your mail server in what people might consider a "dynamic IP" range.

Make sure that you are not using a CNAME? to deliver to. For example mail to foo@fishbowl.example.com will not work if fishbowl.example.com is a CNAME? to some other machine.

Don't set an MX? to point to an IP address! It won't work. MX?s must point to a record which contains an A? or an AAAA? RR. Not a CNAME?, not anything else.

Make sure that the reverse lookup of your outgoing mailserver exists, make sure has a matching forward record, and where possible, make sure that your HELO/EHLO name matches the reverse. Note, that this usually doesn't match the name of the domain you want to recieve mail for.

Don't use an underscore "_" in your domain name for mail, in your HELO/EHLO or 250 server greeting. Mail will get dropped.

Make sure you send mail from a domain that exists, and has at least an A?/AAAA? or MX? record. If you use an internal mail domain that doesn't actually exist, and mail from this internal domain somehow gets onto the Internet, you will lose mail.

Use http://dnsreport.com/ to verify that your DNS is in good healthy working order.

Attempt to publish a SPF record for your domain.

Secondary MX?s

Secondary MX?s have fallen out of favour in recent years as the InterNet is more reliable and there are techniques for keeping your primary up (such as load balancing NATs). Having a secondary MX? is good if your connectivity is unreliable but a pain otherwise.

Be aware that spammers regularly send to secondary MX?s directly to avoid aggressive RBL checks on the primary MailServer. This can be exploited by having a secondary MX? that always returns a 400 series code (temporary failure), or is stricter with its RBL checks. Another trick is to list your primary MX? again as the highest number MX? so that spammers hit that one first.

Regularly check that your backup MX? still correctly relays. You won't notice a backup MX? rejecting mail until the first time your primary goes down and all your mail is immediately bounced rather than retried later.

SMTP Auth

Unless you can do challenge/response authentication, you should make sure your SMTP server supports SSL as outlined above. The easiest authentication to get working with SMTP is PLAIN or LOGIN authentication.

See EximSmtpAuth for information about configuring Exim for it.

STARTTLS

Make sure that your smtp server supports SSL (even if you don't have a certificate), it should do STARTTLS to SMTP servers that support it.

If you use Exim with Debian stable, install the exim-tls package. For Debian testing/unstable (see FlavoursOfDebian), Exim already supports TLS by default.

If you have an SSL certificate, then make sure that Exim knows about it (and that your MX?s match the name on the certificate!) so that incoming connections can be SSL encrypted if necessary.

If you relay for other machines, you should set up SSMTP (SMTP over SSL) on Port 465/TCP. This is important in particular for laptops which may be used at a hotel, cybercafe or over wireless where port 25 outgoing may be blocked. MUAs should be configured to use SSMTP where possible.

Administrative mail accounts

Make sure you have a postmaster@ and abuse@ Email addresses that have the least number of filters (Spam, Virus, etc) on them. People may try to send you mail to notify you that your machine is broken and explain how you can fix it, but if you treat all mail from their machine as invalid, you'll never hear about the problem.

Virus and Spam filtering

Make sure you've read http://kmself.home.netcom.com/Rants/avspam.html

Misc

Try to run an IDENT server on your mail server. Several mail servers still try to check IDENT by default. If you don't have IDENT enabled, then make sure you don't just drop packets to the IDENT port, or you will cause other MailServers to wait for a time out before they let you send any Email, slowing everything down.

CategoryBestPractices

电影 免费电影 电影下载 在线电影 影视 免费电影下载

猫沙 猫抓板 猫用品 猫粮 模具 新力净化 空气净化行业 洁净论坛 洁净技术 clean room 无尘室 无尘室净化设备 风机过滤网 有隔板空气过滤器 铝隔板式高效率空气过滤器 无隔板高效空气过滤器 高效率空气过滤器 空气过滤器 狩猎 头盔夜视仪 红外热成像仪 双筒夜视仪 枪械瞄准镜 微光夜视仪 夜视瞄准镜 手持夜视观察仪 药物流产 钛板 冷却塔 挖掘机 搅拌器 球磨机 离心机 会计师事务所 标签打印机 吸顶灯 反光材料 强直性脊柱炎 自动门 钢结构 尿毒症 化学清洗 工业清洗 电视墙 加密狗 过滤器 艾滋病 梅毒 尖锐湿疣 淋病 性病 电子白板 升降机 脚手架 高压水枪 吸脂 洗涤设备 桑拿设备 加湿器 防盗门 保暖内衣 防护服 商铺招租 户外广告 保温材料 防火材料 涂料 无痛流产 油漆 拓展训练 婚庆公司 旗袍 婚纱 管道疏通 婚纱摄影

家政 家政服务 家政服务公司 保姆 钟点工 小时工

汽车坐垫 汽车坐垫代理 汽车坐垫销售 汽车坐垫生产 北京汽车坐垫

白癜风 白癜风专家 白癜风医院 白癜风治疗 白癜风药品 白癜风信息

美容仪器 美容设备

空调清洗 中央空调清洗 清洗空调 清洗中央空调

搬家公司 造桥机 中央空调 麦克维尔 管道疏通 霓虹灯 卫生洁具 游乐设备 游乐设备 乳胶漆 塑钢门窗 CI策划 私人侦探 可视门铃 律师事务所 驾校 轴承 夜视仪 高压清洗机 铁路标准 铁路工法 架桥机 网站推广 快餐 订餐 天花板 NEC交换机 印刷机械 整形美容 糖尿病 高血压 建材 变压器 胶合板 热水器 楼市图 二手车 安防设备 继电器 传感器 对讲机 宠物食品 猫粮 狗粮