reject_hosts not always working?

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: John Henders
Fecha:  
A: exim-users
Asunto: reject_hosts not always working?

I've noticed occasionally that sites are managing to get mail through my
machines even though the network is listed in my reject list. Here is an
example. Has anyone else seen this. I thought I had it set up correctly.

First in configuration, I have these lines.

sender_host_reject = *@partial-lsearch;/opt/exim/etc/reject.hosts
sender_host_reject_relay = *@partial-lsearch;/opt/exim/etc/reject.hosts
sender_reject_recipients = partial-lsearch;/opt/exim/etc/reject.hosts

ispam.net is in the reject.hosts file. Yet here is an example I think
should have been caught by this but wasn't.

1997-05-26 18:57:41 0wWBW8-0006If-00 <= jim@???
H=relay5.ispam.net [207.124.161.54] U=root P=smtp S=2633

1997-05-26 18:57:42 0wWBW8-0006If-00 => jhenders <jhenders@???>
D= T=vmail 1997-05-26 18:57:42 0wWBW8-0006If-00 Completed

So my question is, why did this get accepted?

>From the header it seems that Spamford claims to have some sort of

cloaking in his new spam program but the logs (and header) clearly show
that exim know what host it was talking to when it accepted the mail.
I've also seen cases in the reject log where exim had parsed the header
and rejected the mail for the

Here is the header.

Return-Path: <jim@???@vanbc.wimsey.com>
Received: from spade.wimsey.com
        by vanbc.wimsey.com with smtp
        (Smail-3.1.29.1 #32) id m0wWBWf-0001zuC; Mon, 26 May 97 18:58 PDT
Received: from mail.vcr.istar.ca [204.191.152.4]  with smtp
        by spade.wimsey.com with smtp
        (Smail-3.1.92 1996-Mar-19 #14 #14) id m0wWBWf-000BayC; Mon, 26 May 97 18:58:13 -07
00 (PDT)
Received: from vip by mail.vcr.istar.ca with local (Exim 1.62 #10)
        id 0wWBW9-0006Iz-00; Mon, 26 May 1997 18:57:41 -0700
Received: from relay5.ispam.net [207.124.161.54] (root)
        by mail.vcr.istar.ca with smtp (Exim 1.62 #10)
        id 0wWBW8-0006If-00; Mon, 26 May 1997 18:57:40 -0700
Received: from --- CLOAKED! ---
Received: from --- CLOAKED! ---
X-1: This email was sent by "Cyber-Bomber" ... Details at http://www.cyberpromo.com
X-2: This server only relays mail from other sources.
X-3: To report abuse, please send email to abuse@???.
X-4: Coming soon --> Master remove list implementation by I.E.M.M.C.
Date: Tue, 27 May 97 01:50:48 EST
From: jim@??? (Freedom of Speech)
To: UniSpam@Join!.com
-- 
      Artificial Intelligence stands no chance against Natural Stupidity.
                GAT d- -p+(--) c++++ l++ u++ t- m--- W--- !v
                     b+++ e* s-/+ n-(?) h++ f+g+ w+++ y*