Re: Advice on best way to set up multi-route NAT for lots of IPs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



...
> I am all up for alternative means for making sure a particular IP can
> be available for sending 24/7 cheaply, if there are any. (Don't
> mistake cheap for provider as cheap for sender though!) I thought
> iptables/netfilter would be a good way of doing it but I might be
> wrong...

In the hope that one final example shows the fact that what I want to
do is completely legitimate. Here are the headers of a *LINUX
FOUNDATION* newsletter I received today:

Received: from email-gaia.pd27.com (email-gaia.pd27.com. [208.43.21.70])
        by mx.google.com with ESMTP id gj7si35742626qab.7.2012.01.04.06.13.51;
        Wed, 04 Jan 2012 06:13:52 -0800 (PST)
Received-SPF: pass (google.com: domain of
undelivered+6342+158668917@xxxxxxxx designates 208.43.21.70 as
permitted sender) client-ip=208.43.21.70;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
undelivered+6342+158668917@xxxxxxxx designates 208.43.21.70 as
permitted sender) smtp.mail=undelivered+6342+158668917@xxxxxxxx
Received: by email-gaia.pd27.com id h0hfa00oaq85 for
<my_email@xxxxxxxxx>; Wed, 4 Jan 2012 09:09:16 -0500 (envelope-from
<undelivered+6342+158668917@xxxxxxxx>)
Return-Path: <undelivered+6342+158668917@xxxxxxxx>
Message-ID: <1325686156.4f045d8cb7f92@swift.generated>
Date: Wed, 04 Jan 2012 09:09:16 -0500
Subject: CFP Deadline This Friday To Speak at Android Builders Summit and
 Embedded Linux Conference in February
From: Linux Foundation Events <no-reply@xxxxxxxxxxxxxxxxxxx>

208.43.21.70 is an IP (that seems to be, see the whois) registered to
Pardot, an online marketing (including email) infrastructure provider,
NOT the Linux Foundation. All the newsletters from the Linux
foundation that I have received since 2011-10-11 have come from the
same IP (hurrah, so it's a dedicated IP!). Pardot have declared many
thousands of IPs as valid IPs that receivers might receive email from
on their behalf (nslookup -type txt pd25.com, then keep digging into
the SPF records to get the actual IPs). They almost certainly have
thousands of clients.
If Pardot have the same issues as we do (they do, they are a
competitor for some products, including email sending), and the Linux
Foundation are a client of theirs and use their email marketing
services, then... the Linux Foundation are SPAMMERS! Yikes! We are all
doomed... :-).

So in other news - does anyone have any suggestions or advice on the
best way to do NAT + multi-routing via several gateways using
netfilter/iptables with 1600+ IPs?
Thanks,
Anton
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux