SM wrote:
> >OK, this was a poor example. Here is a better one. Let's start anew :)
> >
> >The rule is
> >whitelist_from_rcvd [EMAIL PROTECTED] mncs.tomsk.ru
> >
> >The relay is mncs.tomsk.ru, as you see, whose forward and reverse DNS
> >mapping is correct.
>
> The forward and reverse DNS mapping for that host is correct.
>
> >Why does the rule not work with the message below?
> >
> >=================================================
> >
> >>From [EMAIL PROTECTED] Thu Mar 27 14:13:24 2008
> >X-Virus-Scanned: by clamd daemon 0.91.2 for FreeBSD at relay2.tomsk.ru
> >X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on meow.tomsk.su
> >X-Spam-Level: ***
> >X-Spam-Status: No, score=3.4 required=5.0 tests=AWL,BAYES_50,HTML_MESSAGE,
> > MIME_HTML_MOSTLY,MISSING_SUBJECT,TVD_SPACE_RATIO
> >autolearn=no version=3.2.4
> >Return-Path: <[EMAIL PROTECTED]>
> >Received: from mncs.tomsk.ru ([212.73.124.135] verified)
> > by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.13)
> > with ESMTP id 9786656 for [EMAIL PROTECTED]; Thu, 27 Mar 2008
> >15:08:17 +0600
>
> That's because there isn't a hostname in the Received header. The
> "mncs.tomsk.ru" appearing in there is the helo.
This is the standard CommuniGate Pro "Received:" header.
When HELO matches the hostname, this header always looks this way,
with the word "verified" added to it.
When HELO does not match the hostname, the header looks different:
Received: from [213.183.100.11] (HELO blablabla.ru)
by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.13)
with ESMTP id 9853037 for [EMAIL PROTECTED]; Thu, 10 Apr 2008 11:26:20 +0700
> See whether the
> absence of the hostname is because of a CommuniGate Pro configuration
> problem or a DNS problem (the host doesn't get the correct answer
> when doing a reverse DNS).
Neither. It's a feature. Perhaps we need a patch for Received.pm?
I think exim does the same if HELO matches the hostname. This is a
sample exim header:
Received: from relay2.tomsk.ru ([212.73.124.8])
by gw.dtdm.tomsk.ru with esmtps (SSLv3:DES-CBC3-SHA:168)
(Exim 4.67 (FreeBSD))
(envelope-from <[EMAIL PROTECTED]>)
id 1JjoVV-0008Wl-8E
for [EMAIL PROTECTED]; Thu, 10 Apr 2008 11:35:29 +0700
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
sip:[EMAIL PROTECTED]
