[conspire] How not to muck up DNS & domain registration

Don Marti dmarti at zgp.org
Tue Apr 12 22:04:44 PDT 2005


begin  Rick Moen quotation of Tue, Apr 12, 2005 at 09:11:15PM -0700:

> There are situations that don't readily lend themselves to SPF
> authentication, notably mail forwarding and the sloppier varieties of 
> mail handling during mobile computing.  There are also countermeasures
> to adapt those situations to a changing world that has SPF records in
> it.

I set up Postfix like this: 
http://www.miek.nl/linux/postfix.html

On the server (xenu.example.com in most of the
examples I have lying around), I have a user "tunnel"
whose shell is set to /bin/false in /etc/passwd.
And tunnel-only ssh public keys have this at the
beginning of them:

command="/bin/false",no-X11-forwarding,no-agent-forwarding,no-pty

-- 
Don Marti
http://zgp.org/~dmarti/
dmarti at zgp.org




More information about the conspire mailing list