On Tue, Nov 05, 2002 at 04:09:35PM -0600, Malcolm wrote: > On 5 Nov 2002 21:51:13 +0000 > "Hermann Wecke" <[EMAIL PROTECTED]> wrote: > > > On Tue, 5 Nov 2002, Malcolm wrote: > > > > What is the IP being reported as "blacklisted"? > > > > Well here's a little clip from the logs. > > Nov 3 06:28:22 [29856] scanning with global configuration > Nov 3 06:28:22 [29856] mail from <[EMAIL PROTECTED]> to > <[EMAIL PROTECTED]> > Nov 3 06:28:22 [29856] (209.196.61.66) found in RBL: xbl.selwerd.cx. > > Not sure where it gets that IP address? host 209.196.61.66 > 66.61.196.209.in-addr.arpa. domain name pointer sclp3.sclp.com
209.196.61.66 is the last server to hand off the mail to my local mailserver: Received: from unknown (HELO sclp3.sclp.com) (209.196.61.66) by d0rk.org with SMTP; 5 Nov 2002 16:11:50 -0600 Check your headers and you should see something similar. In this case, it looks like xbl.selwerd.cx is being a naughty RBL DNS server: $ host 66.61.196.209.xbl.selwerd.cx 66.61.196.209.xbl.selwerd.cx is a nickname for sagenetworks.xbl.selwerd.cx sagenetworks.xbl.selwerd.cx has address 127.0.0.4 I suggest you either remove them from your RBL server pool or have them remove the range that includes 209.196.61.66 from their RBL DNS server. HTH, -chris -- Chris Huseman [EMAIL PROTECTED] _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
