[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    [SAtalk] Problems with RCVD_IN_NJABL_DIALUP
From:       "web4.hm - Peter Padberg" <Peter.Padberg () web4 ! hm>
Date:       2003-10-31 8:16:57
[Download RAW message or body]

Hi folks!

I installed the SA2.60 on mine webserver and now I have a question:

I have 2 qmail-servers:
81.3.4.66 and
81.3.4.67

They work on two diffrent machines.

Only on 81.3.4.67 is the SA installed.
On 81.3.4.66 works only qmail without SA.

Now I write an empty Email from *.66 to *.67
It looks like this:

<SNIP>
Received: (qmail 30124 invoked from network); 30 Oct 2003 11:01:39 -0000
Received: from anna.web4.hm (81.3.4.66) by olga.web4.hm with SMTP; 30
Oct
        2003 11:01:39 -0000
Received: (qmail 7003 invoked from network); 30 Oct 2003 11:01:38 -0000
Received: from pd951221b.dip.t-dialin.net (HELO nbpeter.web4.hm)
        (217.81.34.27) by anna.web4.hm with SMTP; 30 Oct 2003 11:01:38
-0000
Subject: 
From: "peter@szene.hm" <peter@szene.hm>
Reply-To: peter@szene.hm
To: Peter Padberg <peter.padberg@web4.hm>
Content-Type: text/plain
Message-Id: <1067511701.2628.3.camel@nbpeter.web4.hm>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.4 
Date: Thu, 30 Oct 2003 12:01:41 +0100
Content-Transfer-Encoding: 7bit
X-Spam-DCC: : 
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on 
        olga.web4.hm
X-Spam-Level: ***
X-Spam-Status: No, hits=3.3 required=5.0 tests=RCVD_IN_DYNABLOCK,
        RCVD_IN_NJABL,RCVD_IN_NJABL_DIALUP,RCVD_IN_SORBS autolearn=no 
version=2.60
X-Spam-Report:  *  0.5 RCVD_IN_NJABL_DIALUP RBL: NJABL: dialup sender
did
        non-local SMTP *      [217.81.34.27 listed in dnsbl.njabl.org]
*  2.5
        RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
*     
        [Dynamic/Residential IP range listed by] [easynet.nl DynaBlock -
        <http://dynablock.easynet.nl/errors.html>] *  0.1 RCVD_IN_SORBS
RBL: SORBS:
        sender is listed in SORBS *      [217.81.34.27 listed in
dnsbl.sorbs.net] *
        0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
*     
        [217.81.34.27 listed in dnsbl.njabl.org]
X-Evolution-Source: pop://Peter.Padberg%40web4.hm@mail.web4.hm
<SNAP>

So, why the tell SA think that mine servers are on dynamcliy IPs?
Both are in a computer-centre with static-IPs.
-> RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address

And both servers are configured with POP_BEFORE_SMTP:
-> RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org

An IP-Reverse-Lookup is also configured:
peterpa@nbpeter:~> dig -x 81.3.4.66

; <<>> DiG 9.2.2 <<>> -x 81.3.4.66
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28810
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;66.4.3.81.in-addr.arpa.                IN      PTR

;; ANSWER SECTION:
66.4.3.81.in-addr.arpa. 8074    IN      PTR     anna.web4.hm.

;; AUTHORITY SECTION:
4.3.81.in-addr.arpa.    15926   IN      NS      ns2.sserv.de.
4.3.81.in-addr.arpa.    15926   IN      NS      rev0.ns.sserv.net.

;; ADDITIONAL SECTION:
ns2.sserv.de.           85757   IN      A       212.172.193.240
rev0.ns.sserv.net.      1721    IN      A       62.26.117.240

;; Query time: 4 msec
;; SERVER: 192.168.0.2#53(192.168.0.2)
;; WHEN: Thu Oct 30 12:15:17 2003
;; MSG SIZE  rcvd: 155

peterpa@nbpeter:~> dig -x 81.3.4.67

; <<>> DiG 9.2.2 <<>> -x 81.3.4.67
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5520
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;67.4.3.81.in-addr.arpa.                IN      PTR

;; ANSWER SECTION:
67.4.3.81.in-addr.arpa. 15923   IN      PTR     olga.web4.hm.

;; AUTHORITY SECTION:
4.3.81.in-addr.arpa.    15923   IN      NS      ns2.sserv.de.
4.3.81.in-addr.arpa.    15923   IN      NS      rev0.ns.sserv.net.

;; ADDITIONAL SECTION:
ns2.sserv.de.           85754   IN      A       212.172.193.240
rev0.ns.sserv.net.      1718    IN      A       62.26.117.240

;; Query time: 3 msec
;; SERVER: 192.168.0.2#53(192.168.0.2)
;; WHEN: Thu Oct 30 12:15:19 2003
;; MSG SIZE  rcvd: 155

peterpa@nbpeter:~>

The crazy think is,
when I send an email from 66 to 67 from commandline I received this email:
<SNAP>
Received:  (qmail 17180 invoked from network); 29 Oct 2003 19:41:24
-0000
Received:  from anna.web4.hm (81.3.4.66) by olga.web4.hm with SMTP; 29
Oct 2003 19:41:24 -0000
Received:  (qmail 2507 invoked by uid 0); 29 Oct 2003 19:41:12 -0000
Datum: 29 Oct 2003 19:41:12 -0000
Message-ID:  <20031029194112.2506.qmail@anna.web4.hm>
Von: root@anna.web4.hm
An: peter.padberg@web4.hm
X-Spam-DCC:  : 
X-Spam-Checker-Version:  SpamAssassin 2.60 (1.212-2003-09-23-exp) on 
olga.web4.hm
X-Spam-Level:  
X-Spam-Status:  No, hits=0.3 required=5.0 tests=NO_REAL_NAME
autolearn=no  version=2.60
X-Spam-Report:   *  0.3 NO_REAL_NAME From: does not include a real name
X-Evolution-Source:  pop://Peter.Padberg%40web4.hm@mail.web4.hm
Betreff: No Subject
Mime-Version:  1.0
<SNAP>

So, the crazy thing is that the IP seems to be okay?

Everytime when I send from mine Emailaccount SA is going crazy!?
I am going always online on a dynamicly IP with DSL-Modem and internal network.
I send my Emails to mine STMP-server and it sends the emails forward for me.

So, I am very new with the SA.

Does somebody have a hint for me?

Viele Gruesse,
Peter.

-- 
_________________________________________________________________
web4.hm
Pyrmonter Str. 42
D-31789 Hameln

fon: +49-5151 60 99 70-0                   Peter.Padberg@web4.hm
fax: +49-5151 60 99 70-1                   http://web4.hm




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
Spamassassin-talk@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic