[Wylug-help] VeriSign Breaks DNS

[Gavin Harris]

Jon Stockill wrote:
> 1. Reject where the A record points to verisign's server.
>
> 2. Fix your nameservers so they return NXDOMAIN instead of the A record
> for verisign's server.

I'm sure these two would work, but what happens when Verisign decide to
change the IP?

Do you know if it's possible to configure an MTA to reject mail if the
sender's domain has no MX records? Since they're only supplying A
records that might work. Someone correct me if it'd horribly break things ;)

--
Gavin Harris