Re: [SPAM] Whitelist rDNS for a single server
Eric Shubert <[email protected]> Wed, 24 Aug 2011 11:28:19 -0700
| Newsgroups | gmane.mail.qmail.admin |
|---|---|
| Organization | Eric Shubert & Associates |
| Message-ID | <[email protected]> |
Sorry, that's something I've never seen before. I'm guessing it's a patch to qmail-smtpd, but that's not worth much. As a short term work-around, you might try adding an entry to the tcp.smtp file for the server in question, with the RELAYCLIENT="" variable set, eg: 70.254.229.27:RELAYCLIENT="",...(plus whatever other variables your server uses typically) This will essentially make your server an open relay for that IP address. I expect this would work, but be careful with it. And don't forget to "qmailctl cdb" after changing the tcp.smtp file. -- -Eric 'shubes' On 08/24/2011 11:03 AM, Rob Wright wrote: > Thanks for the reply. It's definitely not spamdyke, as we do not have this > installed. When Inter7 did the setup for is SpamAssassin was installed. > > Here's what I've got in my log file, it's qmail-smtpd doing the rejection. > > @400000004e5539281689fb3c tcpserver: ok 10664 > mail.poncacity.net:70.254.229.3:25 :70.254.229.27::53562 > @400000004e5539281aedc6a4 CHKUSER accepted rcpt: from > <[email protected]:unknown:> remote > <callisto.poncacity.net:unknown:70.254 > .229.27> rcpt<[email protected]> : found existing recipient > @400000004e5539281db9851c qmail-smtpd: senders must have valid reverse DNS > @400000004e5539281dbe47dc tcpserver: end 10664 status 256 > > Part of the problem here is that I can't figure out what they've hacked to get > qmail-smtpd to do the rejection. In my /var/qmail/control directory there is > an 'rdns' file with a value of "1"; rdns checking is either on or off. > > Any further ideas? I suppose this may be a lesson for the boss to "install > your own mail server" but that bridge is already crossed. If there's no clear > answer I'll just have to call Inter7 for support and let them deal with it. > > Rob > > On Wednesday 24 August 2011 11:49:44 Eric Shubert wrote: >> That would take care of things if the rejection is due to an RBL, but >> the rejection is stated as being due to lack of rDNS, which is >> different. The only thing I know of that rejects due to missing rDNS >> (using qmail) is spamdyke (a very good anti-spam tool btw). >> >> What specifically is causing the reject? You might post a sample from >> your smtp log if you can't tell. If it's spamdyke, then the spamdyke >> config has several ways of whitelisting. >> >>> http://cr.yp.to/ucspi-tcp/rblsmtpd.html >>> >>> Edit your tcp.smtp file and put the address in and set RBLSMTPD="" and it >>> will bypass the RBL check for that IP address. Afterwards, rebuild your >>> tcp.smtp.cdb file (depending on how your built your toaster it'll be as >>> easy as "qmailctl cdb", or some other manual command) >>> >>> Hope that helps. >>> >>> On 11-08-24 9:14 AM, "Rob Wright"<[email protected]> wrote: >>>> Greetings. I hope this list is still intact and that I'm on-topic. I've >>>> searched for a solution and haven't been able to come up with anything. >>>> >>>> I've got a problem sprung up recently and can't quite figure out how to >>>> get >>>> around it. While I'm waiting for a bureaucracy to unsnaggle some DNS >>>> information on their side, is there anyway for us to whitelist a single >>>> mail >>>> server that's being rejected for not having rDNS? The mail server is >>>> known to >>>> us and I feel comfortable with taking this action. Hopefully this won't >>>> be a >>>> permanent solution but just a dirty hack while I wait for others to do >>>> their >>>> jobs. >>>> >>>> We've got a vanilla Inter7 installed vpopmail/qmail system and I have >>>> not been >>>> able to figure out of this is do-able or not. If it's possible how can I >>>> go >>>> about doing so? >>>> >>>> Thanks for any help or pointers. >>>> >>>> Rob Wright >>>> [email protected] >> >> > > > > !DSPAM:4e5542de32716100613893!