Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: exim: users

blacklists problem

 

 

exim users RSS feed   Index | Next | Previous | View Threaded


dimma at higis

Aug 28, 2008, 12:11 PM

Post #1 of 4 (358 views)
Permalink
blacklists problem

Hi, list

We are using exim with our own blacklist.
Config is:
acl_check_connect:
...
defer message = rejected because $sender_host_address\
is in black list at $dnslist_domain\n\
$dnslist_text
dnslists = my.black.list
...

time-to-time under heavy load we looking strange behavior:
connection from IP-address A closing with message like as rejected
because address B in in blacklist.
Address B really in black list. It's correct. But A and B addresses
absolutely different and A not blacklisted.
Any ideas?

We are using exim-4.69 under FreeBSD 7.0 amd64

WBR.
Dmitriy

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


iane at sussex

Aug 29, 2008, 4:42 AM

Post #2 of 4 (330 views)
Permalink
Re: blacklists problem [In reply to]

--On 28 August 2008 23:11:45 +0400 Dmitriy Kirhlarov <dimma[at]higis.ru> wrote:

> Hi, list
>
> We are using exim with our own blacklist.
> Config is:
> acl_check_connect:
> ...
> defer message = rejected because $sender_host_address\
> is in black list at $dnslist_domain\n\
> $dnslist_text
> dnslists = my.black.list
> ...
>
> time-to-time under heavy load we looking strange behavior:
> connection from IP-address A closing with message like as rejected
> because address B in in blacklist.
> Address B really in black list. It's correct. But A and B addresses
> absolutely different and A not blacklisted.
> Any ideas?

I think we need more clues. Does this happen only for a specific address?
IE. is address 'A' or address 'B' always the same? If so, what are the
addresses in question.


> We are using exim-4.69 under FreeBSD 7.0 amd64
>
> WBR.
> Dmitriy



--
Ian Eiloart
IT Services, University of Sussex
x3148

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


dimma at higis

Aug 29, 2008, 4:56 AM

Post #3 of 4 (336 views)
Permalink
Re: blacklists problem [In reply to]

Ian Eiloart wrote:
>
>
> --On 28 August 2008 23:11:45 +0400 Dmitriy Kirhlarov <dimma[at]higis.ru>
> wrote:
>
>> Hi, list
>>
>> We are using exim with our own blacklist.
>> Config is:
>> acl_check_connect:
>> ...
>> defer message = rejected because $sender_host_address\
>> is in black list at $dnslist_domain\n\
>> $dnslist_text
>> dnslists = my.black.list
>> ...
>>
>> time-to-time under heavy load we looking strange behavior:
>> connection from IP-address A closing with message like as rejected
>> because address B in in blacklist.
>> Address B really in black list. It's correct. But A and B addresses
>> absolutely different and A not blacklisted.
>> Any ideas?
>
> I think we need more clues. Does this happen only for a specific
> address? IE. is address 'A' or address 'B' always the same? If so, what
> are the addresses in question.

This happen for random addresses (any A and any B. B really
blacklisted). Every time under heavy load.


WBR.
Dmitriy

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


iane at sussex

Aug 29, 2008, 6:00 AM

Post #4 of 4 (333 views)
Permalink
Re: blacklists problem [In reply to]

--On 29 August 2008 15:56:37 +0400 Dmitriy Kirhlarov <dimma[at]higis.ru> wrote:

> Ian Eiloart wrote:
>>
>>
>> --On 28 August 2008 23:11:45 +0400 Dmitriy Kirhlarov <dimma[at]higis.ru>
>> wrote:
>>
>>> Hi, list
>>>
>>> We are using exim with our own blacklist.
>>> Config is:
>>> acl_check_connect:
>>> ...
>>> defer message = rejected because
>>> $sender_host_address\ is in black list at $dnslist_domain\n\
>>> $dnslist_text
>>> dnslists = my.black.list
>>> ...
>>>
>>> time-to-time under heavy load we looking strange behavior:
>>> connection from IP-address A closing with message like as rejected
>>> because address B in in blacklist.
>>> Address B really in black list. It's correct. But A and B addresses
>>> absolutely different and A not blacklisted.
>>> Any ideas?
>>
>> I think we need more clues. Does this happen only for a specific
>> address? IE. is address 'A' or address 'B' always the same? If so, what
>> are the addresses in question.
>
> This happen for random addresses (any A and any B. B really
> blacklisted). Every time under heavy load.
>
>

My best guess is that the file system isn't keeping up with the reads.
Since you are only deferring, the sender should be able to retry.


--
Ian Eiloart
IT Services, University of Sussex
x3148

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

exim users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.