[conspire] How not to muck up DNS & domain registration
Don Marti
dmarti at zgp.org
Tue Apr 12 22:04:44 PDT 2005
begin Rick Moen quotation of Tue, Apr 12, 2005 at 09:11:15PM -0700:
> There are situations that don't readily lend themselves to SPF
> authentication, notably mail forwarding and the sloppier varieties of
> mail handling during mobile computing. There are also countermeasures
> to adapt those situations to a changing world that has SPF records in
> it.
I set up Postfix like this:
http://www.miek.nl/linux/postfix.html
On the server (xenu.example.com in most of the
examples I have lying around), I have a user "tunnel"
whose shell is set to /bin/false in /etc/passwd.
And tunnel-only ssh public keys have this at the
beginning of them:
command="/bin/false",no-X11-forwarding,no-agent-forwarding,no-pty
--
Don Marti
http://zgp.org/~dmarti/
dmarti at zgp.org
More information about the conspire
mailing list