Re: [dnswl-users] Mailserver with many domains ?

[Matthias Leisi <matthias@xxxxxxxxx>]

ram schrieb:

> I assume your ~200 domains are your customers domains. Do not whitelist
> your customer domains mails because they may at anytime accidentally get
> infected with a virus and start spewing spams.  This will cause a lot of
> credibility loss for your servers 

I just realized that I answered to Andreas only by private mail, and not
to the list. I wrote him:

--- cut ---
>> In the white listing request form, there is a field for the main domain 
>> > name and a second one for additional domains.
>> > 
>> > Our main mail server is responsible for ~200 different email domains and 
>> > the list of the domains also changes from time to time.
> 
> The secondary domains information is not actively used at the moment -
> it is more informational and used for reference.
> 
>> > I don't think it makes sense to include all 200 domains and request a 
>> > update each month for the changed domains... ?
> 
> Just write a short note into the comment field. If there are some
> exceptionally important secondary domains, it may make sense to mention
> them in the secondary domains field anyway.
--- cut ---

And Ram is right to point out that one should be cautious with
whitelisting customer domains. It is usually worth separating corporate
email traffic from customer email traffic, so that whitelisting can be
applied appropriately (ie, higher trust on the corporate mailserver).

Shared mailservers are inherently harder to manage from a whitelisting
point of view (trust levels can only be assigned on IP addresses, but
not From: addresses), but the choice of the email model is of course a
business decision of each provider.

-- Matthias