Re: Re: [SPAM] Whitelist rDNS for a single server

On 8/24/2011 2:03 PM, Rob Wright wrote:
> Thanks for the reply. It's definitely not spamdyke, as we do not have this
> installed. When Inter7 did the setup for is SpamAssassin was installed.
>
> Here's what I've got in my log file, it's qmail-smtpd doing the rejection.
>
> @400000004e5539281689fb3c tcpserver: ok 10664
> mail.poncacity.net:70.254.229.3:25 :70.254.229.27::53562
> @400000004e5539281aedc6a4 CHKUSER accepted rcpt: from
> <[email protected]:unknown:>  remote
> <callisto.poncacity.net:unknown:70.254
> .229.27>  rcpt<[email protected]>  : found existing recipient
> @400000004e5539281db9851c qmail-smtpd: senders must have valid reverse DNS
> @400000004e5539281dbe47dc tcpserver: end 10664 status 256
>
> Part of the problem here is that I can't figure out what they've hacked to get
> qmail-smtpd to do the rejection. In my /var/qmail/control directory there is
> an 'rdns' file with a value of "1"; rdns checking is either on or off.
>
> Any further ideas?  I suppose this may be a lesson for the boss to "install
> your own mail server" but that bridge is already crossed. If there's no clear
> answer I'll just have to call Inter7 for support and let them deal with it.

Install postfix as a smarthost?  Do network tests there (excluding one 
IP from the reverse DNS requirement is done in the config file) then 
pass the message onto Qmail.  Something like

smtpd_client_restrictions =
         check_client_access     cidr:/etc/postfix/skip_reverse_sender.cidr
         reject_unknown_reverse_client_hostname

Inside the .cidr you'd have

1.2.3.0/29 OK

-- 
Darek

>
> Rob
>
> On Wednesday 24 August 2011 11:49:44 Eric Shubert wrote:
>> That would take care of things if the rejection is due to an RBL, but
>> the rejection is stated as being due to lack of rDNS, which is
>> different. The only thing I know of that rejects due to missing rDNS
>> (using qmail) is spamdyke (a very good anti-spam tool btw).
>>
>> What specifically is causing the reject? You might post a sample from
>> your smtp log if you can't tell. If it's spamdyke, then the spamdyke
>> config has several ways of whitelisting.
>>
>>> http://cr.yp.to/ucspi-tcp/rblsmtpd.html
>>>
>>> Edit your tcp.smtp file and put the address in and set RBLSMTPD="" and it
>>> will bypass the RBL check for that IP address. Afterwards, rebuild your
>>> tcp.smtp.cdb file (depending on how your built your toaster it'll be as
>>> easy as "qmailctl cdb", or some other manual command)
>>>
>>> Hope that helps.
>>>
>>> On 11-08-24 9:14 AM, "Rob Wright"<[email protected]>   wrote:
>>>> Greetings. I hope this list is still intact and that I'm on-topic. I've
>>>> searched for a solution and haven't been able to come up with anything.
>>>>
>>>> I've got a problem sprung up recently and can't quite figure out how to
>>>> get
>>>> around it. While I'm waiting for a bureaucracy to unsnaggle some DNS
>>>> information on their side, is there anyway for us to whitelist a single
>>>> mail
>>>> server that's being rejected for not having rDNS? The mail server is
>>>> known to
>>>> us and I feel comfortable with taking this action. Hopefully this won't
>>>> be a
>>>> permanent solution but just a dirty hack while I wait for others to do
>>>> their
>>>> jobs.
>>>>
>>>> We've got a vanilla Inter7 installed vpopmail/qmail system and I have
>>>> not been
>>>> able to figure out of this is do-able or not. If it's possible how can I
>>>> go
>>>> about doing so?
>>>>
>>>> Thanks for any help or pointers.
>>>>
>>>> Rob Wright
>>>> [email protected]
>>
> 
>


!DSPAM:4e553f8932715197284813!