IT Best Practices
Do Not Use MAPS DUL (Dial-up User List) - Anatomy of an SMTP connection
Tue, 08/12/2008 - 21:37 — James O'MalleyTrend Micro recently bought MAPS, an email black hole service. Their DUL list is wrong, out of date, and poorly maintained.
DO NOT USE THIRD PARTY DUL LISTS!
Am I yelling? Sorry about that. I just want to make it clear. There is NO good reason to use a third party Dial-up User List. You can still block dynamic dial-up users from sending mail, but you should do it through reverse DNS, the common mechanism that every sane ISP and mail administrator uses.
What am I talking about? Okay, first, here's a little primer on how a modern email handoff works.
A mail server receives a request to deliver mail to port 25 (SMTP). The mail server then checks the IP of the sender. As a first step, my server might reject the email solely on a hard-coded rule at the IP level. Oops, I do not accept email from your server. Perhaps I have had problems with abuse from that particular IP before, so I might choose to reject it before even looking at it. "Go away," and I slam the door.
If the IP passes that first check, I might process others. Perhaps we might run a reverse DNS request on that IP. The response might come back as ppp-user1-1.0.0.10-dynamic.com or something similar. I can at this point choose to reject the email based on the keyword PPP (dial-up user) or USER. I can be reasonably certain that no corporate or professional mail administrator would allow his important email server to have such a reverse DNS name.
But we are not done wringing all the secrets from the IP address. Next I will check the reverse IP, get the host name, and then check the forward IP. ppp-user1-0.0.0.10-dynamic.com might not exist as a forward record and again, I might reject the email based on the fact that the network of origination is completely messed up. Messed up DNS is a good indication this might not be a network from whom I wish to accept mail.
Now that I have established that your email server has a correct reverse/forward IP and you are who you say you are, I might also check to make sure that your server is the correct MX (Mail exchanger) for the domain in question.
So far so good. We are almost there, but now we must pass the content filters, a gauntlet of truth so to speak. My server will now tell you to proceed with your SMTP stream. We will carefully parse it for bad info, viruses, obvious references to scams, Viagra, and general spamminess (all SMTP is text, by the way). At the end of the SMTP stream, I will announce I have accepted the email for delivery and issue a code 250 (it's an older code, but it checks out. I was about to clear them). If, on the other hand, I choose to reject, my server will issue a code 553, a catch all for general errors, and I bounce your mail or drop it.
The reason you should never use a third party DUL list is quite simply this: reverse DNS already neatly identifies the type of host from which a mail connection originates. It (reverse DNS) is maintained by the ISP and is distributed throughout the world via the wonderful system called DNS. At no point do you need to set up a separate private company to maintain this list (and introduce one more layer of record keeping and error).
Don't fall for it. Specifically ask your email provider what they use for their DUL list. If they answer reverse DNS, then you have found a provider who knows his stuff. If not, I suggest you keep looking. Why don't you start here:
Remote Backup Service Saves the Day
Wed, 01/23/2008 - 15:22 — James O'MalleyMy phone rang and I picked it up.
"I just deleted my entire accounting system." He sounded frantic. I could empathize. I imagined the panic that he probably felt at having lost his entire database of a couple of hundred employees. "Do you have the backup?" he asked.
"Of course. Which directory did you lose?" I quickly logged in to the remote backup server.
This particular client does stevedoring mainly for car cargo. Because of the way he deals with the union he has hundreds of employees in his system. Re-entering them would have been a nightmare. Frankly, I believe he felt that all was lost. There would be no way he was going to come back from this. In the IT world, backups are notoriously unreliable. They become unmaintained. No one has the time to test them. They become low priority as the risk is assumed to be low.
But when things go wrong, it all comes rushing back. The fear that a critical step has been overlooked now haunts all of management. Did we test this? Did the software lapse or somebody damage the data on the tape drives? Who has the CD's? Did the software lapse?
"Okay, here's your directory. You want last night's backup?"
The panic subsided. I could still tell there was a little bit of skepticism, but I figured we would fix that in no time. "Yes, last night is fine. The only thing I did today was erase the entire database."
"Give me a couple of minutes to synchronize the directory. Please exit the program while I restore it." We chatted a little bit about his business, payroll taxes, employee deductions. He liked the way this particular program allowed him to do all his employee W2 and local payroll taxes without having to contract it out. It was maybe a little too easy to delete everything, but then that is where Altamente comes in. Altamente provides an automated remote backup service that is managed by their Altabox network appliance. No need to worry about CD's, tapes or software licenses.
"There you go," I said. "You're all back up and running. Go ahead and enter your program to verify that everything is okay."
"Just a sec... oh, will you look at that. It's all here. Thanks. You just saved my life."
"I appreciate that. It makes me feel good to have been useful."
And in the spirit of John "Hannibal" Smith I say, "I love it when a plan comes together."
If you would like the Altamente team (A-team) to help you with your company's back up plan, please fill out this request form or give us call at 787-638-5380.Drupal Wins Overall Open Source CMS Award, 2007
Sat, 11/03/2007 - 02:27 — James O'MalleyThe Content Management System (CMS) that Altamente uses has won the best of the year in Open Source Content Management Systems.
I have used Drupal for years. It has a steep learning curve, but its tight security model and object oriented codebase keep everyone happy.
It's a Good Time to Buy Hardware
Tue, 10/23/2007 - 04:04 — James O'Malley
We at Altamente have been really enjoying the heated competition between AMD and Intel. First we got 64 bit computing which expanded memory limits to the unimaginable, then as if that was not enough, we got dual cores - and then quad cores. Where will the madness stop?
These things may not make much difference to the home user or gamer. Single user multi-threaded applications are just not that trivial to write. Most applications have not yet taken full advantage of multi-core or even 64 bit computing.
Tailored to the Market
Mon, 10/01/2007 - 19:04 — James O'Malley
Information and products are now easily traded in a global market
place but we believe in providing the extra step of service that
recognizes that each region has its own idiosyncracy and threats. When entering new markets we
look for partners that will ensure our customers will have a product
from Altamente that not only speaks their language but also speaks to
their regional trends in technology use and abuse. Rather than offer a "one size fits all globally,"
Altamente combines
global security trends with locally developed permutations that show
special regard to local needs and regional malware tendencies.

