Steve Huff wrote:
On Oct 28, 2009, at 1:14 PM, Jim Shupert wrote:
10-26 08:36:39 tcpserver: ok 3878
sifter.pps-inc.com:192.168.200.222:25 :216.37.105.169::33074
10-26 08:36:39 rblsmtpd: 216.37.105.169 pid 3878: 451
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL77346
these two lines are the key.
the first line shows the remote mail server (216.37.105.169)
initiating a connection to your mail server.
the second line shows your mail server refusing the connection because
the remote mail server's IP address is in the Spamhaus SBL. to see
why, check the URL which is helpfully posted there in your log.
Mr. Bob needs to get his mail server delisted, or he's going to have
trouble sending to lots of other people besides you.
for a more thorough treatment of qmail logs, read John Simpson's
excellent page: http://qmail.jms1.net/logfiles.shtml
-steve
Thanks -- especially thanks for the excellent page ref.
here is what i do not understand though
if his email server is 216.37.105.169
and I go to spam Haus
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL77346
i see
<snip
Ref: SBL77346
216.37.96.0/20 is listed on the Spamhaus Block List (SBL)
</snip
isn't that a diff subnet ? 216.37.*105.*169 -him , noted offender
216.37*.96.0/20
*I am confused -- could I have snipped to deeply in my 1st email --
are we --certain-- 216.37.*105.*169 is blacklisted?
thanks again!
