ok i just checked a couple of things here:
$ host gateway-s0.haven.k12.pa.us
gateway-s0.haven.k12.pa.us has address 204.186.234.22
$ host 204.186.234.22
Name: gateway-s0.haven.k12.pa.us
Address: 204.186.234.22
based on what you've told me, i'd have to say that 204.186.234.22 is the IP
you're coming from. that net is NOT in the tcprules file you posted to the
list. i would try adding:
204.186.234.:allow,RELAYCLIENT=""
to your tcprules file and try again.
shag
=====
Judd Bourgeois | CNM Network +1 (805) 520-7170
Software Architect | 1900 Los Angeles Avenue, 2nd Floor
[EMAIL PROTECTED] | Simi Valley, CA 93065
Quidquid latine dictum sit, altum viditur.
----- Original Message -----
From: Paul Farber <[EMAIL PROTECTED]>
To: Racer X <[EMAIL PROTECTED]>
Cc: qmail mailing list <[EMAIL PROTECTED]>
Sent: Thu 9 Sep 1999 6.37
Subject: Re: RCPTHOSTS and 533 "Not in rcpthosts"
> I telnet to 209.173.3.254 and get the router login prompt. I did notice
> that I can lookup 209.173.3.254 and get gateway.shsd.haven.f-tech.net.
>
> 09:37:48.865856 gateway-s0.haven.k12.pa.us.25602 > mail.f-tech.net.smtp: P
> 43:45(2) ack 49 win 2096
>
> is what I get when I tcpdump host mail and port 25 then try and send a
> message using the cmd line.
>
> Paul D. Farber II
> Farber Technology
> Ph. 570-628-5303
> Fax 570-628-5545
> [EMAIL PROTECTED]
>
> On Wed, 8 Sep 1999, Racer X wrote:
>
> > looks like one of two things - either the cdb is not what you think it
is,
> > or you're not coming from the IP you think you are. i'll assume the cdb
is
> > okay, but use tcprulescheck and make sure it tells you that RELAYCLIENT
is
> > set.
> >
> > when you telnet in from gateway.shsd.ptd.net, are you sure you are
really
> > coming from 209.173.3.254? when i do a traceroute to 209.173.3.254 i
end up
> > with this:
> >
> > 17 gateway-s0.haven.k12.pa.us (204.186.234.22) 91.351 ms * 84.715 ms
> >
> > and that's the last hop. strangely, i can't trace 204.186.234.22
directly
> > (no route to host). is 209.173.3.254 a virtual interface maybe? use
> > qmail-smtpd's logs on your mail server to check the connection and see
where
> > your server thinks it's from.
> >
> > shag
> > =====
> > Judd Bourgeois | CNM Network +1 (805) 520-7170
> > Software Architect | 1900 Los Angeles Avenue, 2nd Floor
> > [EMAIL PROTECTED] | Simi Valley, CA 93065
> >
> > Quidquid latine dictum sit, altum viditur.
> >
> > ----- Original Message -----
> > From: Paul Farber <[EMAIL PROTECTED]>
> > To: Chris Johnson <[EMAIL PROTECTED]>
> > Cc: qmail mailing list <[EMAIL PROTECTED]>
> > Sent: Wed 8 Sep 1999 19.03
> > Subject: Re: RCPTHOSTS and 533 "Not in rcpthosts"
> >
> >
> > > This is what I have now... just to make sure we area all on the same
page:
> > >
> > > Done from thier router via telnet to my mail server:
> > > thier router ip is 209.173.3.254.. added to qmail-smtpd.cdb for this
test
> > >
> > > gateway.shsd.ptd.net>telnet 207.44.65.16 25
> > > Trying 207.44.65.16, 25 ... Open
> > > 220 mail.f-tech.net ESMTP
> > > helo dude
> > > 250 mail.f-tech.net
> > > mail <[EMAIL PROTECTED]>
> > > 250 ok
> > > rcpt <[EMAIL PROTECTED]>
> > > 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
> > >
> > > config:
> > >
> > > 23893 ? S 0:00 supervise /var/lock/qmail-smtpd tcpserver -v -H -R
> > > -c100 -x /etc/tcprules.d/qmail-smtpd.cdb -u81 -g80 0 smtp qmail-smtpd
> > >
> > > cat qmail-smtpd
> > > 207.44.65.:allow,RELAYCLIENT=""
> > > 146.145.48.133-159:allow,RELAYCLIENT=""
> > > 209.173.3.:allow,RELAYCLIENT=""
> > > 209.173.3.254:allow,RELAYCLIENT=""
> > > 127.:allow,RELAYCLIENT=""
> > > :allow
> > >
> > > made by:
> > > cat qmail-smtpd | tcprules qmail-smtpd.cdb qmail.tmp
> > >
> > > cat /var/qmail/control/rcpthosts
> > >
> > > localhost
> > > f-tech.net
> > > empirebeauty.com
> > > schoeneman.com
> > > goldwellofpa.com
> > > salonconcepts.com
> > > schuylkilldental.com
> > > rollingmeadowsgolf.com
> > > peace-inc.org
> > > teddybearus.com
> > > mail.f-tech.net
> > > login.f-tech.net
> > > admin.f-tech.net
> > > jonesandcopccpa.com
> > > biblicalstudies.com
> > > kochslg.com
> > > keystonedoors.com
> > > dreams-n-romance.com
> > > pritzauto.com
> > > wickerpalace.com
> > > benesch.f-tech.net
> > > haven.k12.pa.us
> > >
> > > Thier domain is haven.k12.pa.us.
> > >
> > > Why is it dying and not allowing thier domain/IP through????
> > >
> > > ANy advise where to look next?
> > >
> > >
> > > Paul D. Farber II
> > > Farber Technology
> > > Ph. 570-628-5303
> > > Fax 570-628-5545
> > > [EMAIL PROTECTED]
> > >
> > >
> > >
> >
> >
>
>
