Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The IETF appears to have had a draft to specify a null mx record whereby a domain would not handle mail and mail delivery systems would fail and return a undeliverable system immediately by directing a domain's only MX record to '.' (c/f http://tools.ietf.org/html/draft-delany-nullmx-00)

Is this draft specification followed by most mail servers out there and worth setting up? Alternately, what's the best way to configure mail to not be delivered for a domain in the process of deprication?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

As for depreciation: removing the MX record and blocking port 25 at corresponding A address for the domain is the normal thing to do...

share|improve this answer
    
The host at the A record isn't mine; so I was wondering if I could do it entirely via DNS. This does, however, make the most sense. –  Oesor Jan 4 '12 at 16:43
add comment

@Hubert's solution should prevent email from being delivered.

You could also configure the email server to redirect to the new domain and send a fake bounce message indicating the new domain. This approach is discussed in the Exim documentation.

You may also want to setup an SPF record indicating the site as not sending e-mail would be an additional indication that the domain is not involved in e-mail exchange.

I like the concept of being able to specify the domain as non-email with a null MX. It would help determine if incoming mail is arriving from a bogus domain, or is being sent to a bogus domain. SPF does a good job of this but the null MX would fill in some edge cases.

I also validate incoming servers using SPF and refuse email the SPF record exists, but the server is not allowed to send email from the originating IP address. This is outside the design, but fits the requirements as the mail servers need to be able to send and receive administrative email.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.