Interpreting rejectlog "recipients from..." entries.

Top Page
Delete this message
Reply to this message
Author: Dan Birchall
Date:  
To: exim-users
New-Topics: testing spamdomain
Subject: Interpreting rejectlog "recipients from..." entries.
Hi folks,

I know most of the talk on here is more exim-developers than
exim-users (hi, tww and others who actually read the source ;)
but I've got a somewhat simple question to give your brains a
break.

Occasionally, I get an entry in rejectlog like these:

1997-09-18 10:47:32 recipients from [206.161.225.17] refused (host)
------------------------------------------------------------------------------
1997-09-18 12:02:21 recipients from [131.158.20.10] refused (host)
------------------------------------------------------------------------------

I understand the entries about connections being refused due to
(reject net), as I'm blocking more than a few netblocks of well
known spammers, but these have me a bit more confused. I've not
blocked either of the netblocks above, nor their associated
domains, so I'm guessing that it must have something to do with
the other configuration options I've set. I don't think it's
the headers_check_syntax = true setting, as results of that tend
to show up in mainlog.

I'm using the following things that I could possibly see having
an effect on this:

recipients_max = 10
recipients_max_reject = true
sender_net_accept_relay = "204.249.49.0/204.249.50.0"
sender_host_accept_relay = "shag.dial.emanon.net:versa.scream.org"
sender_host_reject_recipients =
"partial-lsearch;/usr/exim/lists/spam_domains"
sender_net_reject_recipients = /usr/exim/lists/spam_networks

I've already ruled out the spam_domains and spam_networks lists
as being to blame, so I'm guessing that one of two things is
happening.

1. Someone's trying to relay where they shouldn't, or
2. Someone's trying to send a message to more than 10 people at
one time.

Can anyone out there clarify this for me?

-Dan

--
Dan Birchall, Internet Systems Administrator - djb@???
16 Straight Communications, Mount Laurel, NJ - 888 4-16STR8 x 131

--
* This is sent by the exim-users mailing list.  To unsubscribe send a
    mail with subject "unsubscribe" to exim-users-request@???
* Exim information can be found at http://www.exim.org/