I know many (at least some) of us are running Len's IMGate. Great solution
btw Len.
I have one question though which I believe is more on a postfix issue but I
thought I would ask here before joining another list.
When spam does get through I usually send it off to spamcop for reporting.
But occassionally I notice in spamcop analysis that some of the relays are
shown as blocked by ORBS. Isn't postfix/IMGate supposed to block IP's listed
in ORBS? Or do I have a config error? My main.cf file contains the
"reject_maps_rbl" clause in smtp_client_restrictions statement and
relays.orbs.org is listed in maps_rbl_domains
Below is the snippet that I'm questioning, mx1.netdotcom.com is my IMGate
machine.
Received: from ns.kornet.net (unknown [203.251.188.1]) by mx1.netdotcom.com
(Postfix) with ESMTP id 3867A50103 for <[EMAIL PROTECTED]>; Tue, 20 Mar
2001 15:30:45 -0500 (EST)
[show] "nslookup 10.194.67.63.dul.maps.vix.com." (checking ip) not found
Possible spammer: 203.251.188.1
[show] "nslookup ns.kornet.net" (checking ip) ip = 168.126.63.1
[show] "nslookup ns.kornet.net" (checking ip) ns.kornet.net not
203.251.188.1, discarded as fake.
[show] "dig -x 203.251.188.1 soa" (digging for start of authority) - not
found
ips don't match; ns.kornet.net discarded as fake
Taking name from IP...
[show] "nslookup 203.251.188.1" (getting name) 203.251.188.1 = kiad.co.kr
[show] "nslookup kiad.co.kr" (checking ip) ip = 203.251.188.1
[show] "nslookup 1.188.251.203.rbl.maps.vix.com." (checking ip) not found
[show] "nslookup 1.188.251.203.inputs.orbs.org." (checking ip) ip =
127.0.0.2
blocked by ORBS
Chain test:mx1.netdotcom.com =? mx1.netdotcom.com
[show] "nslookup mx1.netdotcom.com" (checking ip) ip = 63.67.194.10
[show] "nslookup mx1.netdotcom.com" (checking ip) ip = 63.67.194.10
ips are identical
mx1.netdotcom.com and mx1.netdotcom.com have close IP addresses - chain
verified
[show] "nslookup 1.188.251.203.dul.maps.vix.com." (checking ip) not found
[show] "nslookup 1.188.251.203.inputs.orbs.org." (checking ip) ip =
127.0.0.2
203.251.188.1 is an open relay - saving header for proof.
Received line accepted
Mike
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
