[Sqlgrey-users] IRS TaxPro automated email system needs added to whitelist

[Douglas Mortensen]

The IRS has an automated email that goes out to Professional Independent tax preparers when they sign up on the IRS website. It does not retry after SQLGrey initial defers them.

Is it is advisable to whitelist them by IP or FQDN? Is the only advantage of one or the other the fact that IP is quicker because it doesn't require a DNS lookup (is a DNS lookup even done, or is the FQDN based only on the SMTP HELO hostname?), however FQDN is dynamic & will continue to work in case IPs are ever changed?

66.77.65.237 is the only IP I've seen, out of about 4 connection attempts over 2 days. The FQDN shown I the postfix connection logs is vaftp03.qai.irs.gov. Its DNS record also resolves to the IP just mentioned (66.77.65.237). The PTR record for this IP, also resolves to the same hostname.

So is it recommended to whitelist 66.77.65.237, 66.77.65, or vaftp03.qai.irs.gov?

Thanks,
-
Doug Mortensen
Network Consultant
Impala Networks Inc
CCNA, MCSA, Security+, A+
Linux+, Network+, Server+
.
www.impalanetworks.com<http://www.impalanetworks.com>
P: [phone]
F: [phone]

[Karl O. Pinc]

Post by Douglas Mortensen
The IRS has an automated email that goes out to Professional
Independent tax preparers when they sign up on the IRS website. It
does not retry after SQLGrey initial defers them.

You could complain to the government. They are
in violation of rfc2821 (Simple Mail Transfer Protocol),
section 4.5.4.1:

"...mail that
cannot be transmitted immediately MUST be queued and periodically
retried by the sender."

An email couldn't hurt; otherwise they'll never fix it. Have fun. :)


Karl <***@meme.com>
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein

[Kenneth Marshall]

Post by Karl O. Pinc

Post by Douglas Mortensen
The IRS has an automated email that goes out to Professional
Independent tax preparers when they sign up on the IRS website. It
does not retry after SQLGrey initial defers them.

You could complain to the government. They are
in violation of rfc2821 (Simple Mail Transfer Protocol),
"...mail that
cannot be transmitted immediately MUST be queued and periodically
retried by the sender."
An email couldn't hurt; otherwise they'll never fix it. Have fun. :)
Free Software: "You don't pay back, you pay forward."
-- Robert A. Heinlein

We also document that for misconfigured mail systems, trigger the
notification twice far enough apart to pass the greylist service.
They will recieve the second notification. We also have an opt-out
feature that users can enable should they wish.

Cheers,
Ken