Re: [SPAM] Whitelist rDNS for a single server

Eric Shubert <[email protected]> Wed, 24 Aug 2011 11:28:19 -0700
Newsgroups gmane.mail.qmail.admin
Organization Eric Shubert & Associates
Message-ID <[email protected]>
Sorry, that's something I've never seen before. I'm guessing it's a 
patch to qmail-smtpd, but that's not worth much.

As a short term work-around, you might try adding an entry to the 
tcp.smtp file for the server in question, with the RELAYCLIENT="" 
variable set, eg:
70.254.229.27:RELAYCLIENT="",...(plus whatever other variables your 
server uses typically)
This will essentially make your server an open relay for that IP 
address. I expect this would work, but be careful with it. And don't 
forget to "qmailctl cdb" after changing the tcp.smtp file.

-- 
-Eric 'shubes'

On 08/24/2011 11:03 AM, Rob Wright wrote:
> Thanks for the reply. It's definitely not spamdyke, as we do not have this
> installed. When Inter7 did the setup for is SpamAssassin was installed.
>
> Here's what I've got in my log file, it's qmail-smtpd doing the rejection.
>
> @400000004e5539281689fb3c tcpserver: ok 10664
> mail.poncacity.net:70.254.229.3:25 :70.254.229.27::53562
> @400000004e5539281aedc6a4 CHKUSER accepted rcpt: from
> <[email protected]:unknown:>  remote
> <callisto.poncacity.net:unknown:70.254
> .229.27>  rcpt<[email protected]>  : found existing recipient
> @400000004e5539281db9851c qmail-smtpd: senders must have valid reverse DNS
> @400000004e5539281dbe47dc tcpserver: end 10664 status 256
>
> Part of the problem here is that I can't figure out what they've hacked to get
> qmail-smtpd to do the rejection. In my /var/qmail/control directory there is
> an 'rdns' file with a value of "1"; rdns checking is either on or off.
>
> Any further ideas?  I suppose this may be a lesson for the boss to "install
> your own mail server" but that bridge is already crossed. If there's no clear
> answer I'll just have to call Inter7 for support and let them deal with it.
>
> Rob
>
> On Wednesday 24 August 2011 11:49:44 Eric Shubert wrote:
>> That would take care of things if the rejection is due to an RBL, but
>> the rejection is stated as being due to lack of rDNS, which is
>> different. The only thing I know of that rejects due to missing rDNS
>> (using qmail) is spamdyke (a very good anti-spam tool btw).
>>
>> What specifically is causing the reject? You might post a sample from
>> your smtp log if you can't tell. If it's spamdyke, then the spamdyke
>> config has several ways of whitelisting.
>>
>>> http://cr.yp.to/ucspi-tcp/rblsmtpd.html
>>>
>>> Edit your tcp.smtp file and put the address in and set RBLSMTPD="" and it
>>> will bypass the RBL check for that IP address. Afterwards, rebuild your
>>> tcp.smtp.cdb file (depending on how your built your toaster it'll be as
>>> easy as "qmailctl cdb", or some other manual command)
>>>
>>> Hope that helps.
>>>
>>> On 11-08-24 9:14 AM, "Rob Wright"<[email protected]>   wrote:
>>>> Greetings. I hope this list is still intact and that I'm on-topic. I've
>>>> searched for a solution and haven't been able to come up with anything.
>>>>
>>>> I've got a problem sprung up recently and can't quite figure out how to
>>>> get
>>>> around it. While I'm waiting for a bureaucracy to unsnaggle some DNS
>>>> information on their side, is there anyway for us to whitelist a single
>>>> mail
>>>> server that's being rejected for not having rDNS? The mail server is
>>>> known to
>>>> us and I feel comfortable with taking this action. Hopefully this won't
>>>> be a
>>>> permanent solution but just a dirty hack while I wait for others to do
>>>> their
>>>> jobs.
>>>>
>>>> We've got a vanilla Inter7 installed vpopmail/qmail system and I have
>>>> not been
>>>> able to figure out of this is do-able or not. If it's possible how can I
>>>> go
>>>> about doing so?
>>>>
>>>> Thanks for any help or pointers.
>>>>
>>>> Rob Wright
>>>> [email protected]
>>
>>
>
> 
>
>



!DSPAM:4e5542de32716100613893!