Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: exim: users

RBL entries not being rejected.

 

 

exim users RSS feed   Index | Next | Previous | View Threaded


tcrass at pleiadesdesign

Nov 18, 2009, 9:55 PM

Post #1 of 3 (482 views)
Permalink
RBL entries not being rejected.

Having a bit of a problem it seems with entries in spamhaus and sorbs are
not always getting rejected like I want them to be. I "thought" my
configuration was fine but apparently I've overlooked something.

I've included the message headers and what I think are relevant
configuration files in the pastebin below.

I would greatly appreciate any assistance that can be given to resolve this,
the facebook, bank and WoW spam is getting a bit annoying.

Pastebin link -> http://pastebin.com/m260ff217

Thanks!

~T


--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


exim-users at spodhuis

Nov 18, 2009, 10:32 PM

Post #2 of 3 (437 views)
Permalink
Re: RBL entries not being rejected. [In reply to]

On 2009-11-18 at 23:55 -0600, Torry Crass wrote:
> Having a bit of a problem it seems with entries in spamhaus and sorbs are
> not always getting rejected like I want them to be. I "thought" my
> configuration was fine but apparently I've overlooked something.
>
> I've included the message headers and what I think are relevant
> configuration files in the pastebin below.
>
> I would greatly appreciate any assistance that can be given to resolve this,
> the facebook, bank and WoW spam is getting a bit annoying.
>
> Pastebin link -> http://pastebin.com/m260ff217

$ exim -d+acl+dnsbl -n -bh 95.49.73.219 2>&1 | tee test.log
EHLO afcv219.neoplus.adsl.tpnet.pl
MAIL FROM:<interrelating124 [at] slavnoe>
RCPT TO:<YOURADDRESS>
DATA
###### paste in the email here ######
###### end on a line containing just one dot ######
.

Then look through test.log. It looks like you're on Debian, or a
derived system, which has a way of combining the parts into a whole
config. You'll need to read the Debian docs (might be dpkg-reconfigure
exim or something).

-Phil

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


tlyons at ivenue

Nov 19, 2009, 10:23 AM

Post #3 of 3 (431 views)
Permalink
Re: RBL entries not being rejected. [In reply to]

On Wed, Nov 18, 2009 at 9:55 PM, Torry Crass <tcrass [at] pleiadesdesign> wrote:
> Having a bit of a problem it seems with entries in spamhaus and sorbs are
> not always getting rejected like I want them to be.  I "thought" my
> configuration was fine but apparently I've overlooked something.
>
> I've included the message headers and what I think are relevant
> configuration files in the pastebin below.

There are two kinds of RBL's, one that checks the IP of the sending
mail server, and one that checks the domain of various things
including the sending mail server. You can see from the SA logs that
it's checking an IP based RBL:

0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[95.49.73.219 listed in dnsbl.sorbs.net]

You have sorbs listed in the domain RBL, not the IP based RBL. I
would put sorbs over in the IP based list where it will pass the IP
address instead of the domain name to the dnslists setting. I'm
undetermined whether you should move over spamhaus as well. I use it
for IP based RBL detection, but you may be using some feature that I'm
not familiar with that spamhaus provides.

--
Regards... Todd
The best thing about pair programming is that you have the perfect
audience for your genius. -- Kent Beck

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

exim users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.