Re: [EXIM] how can accept msg when its coming from ip

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: The UNIX Mighty!
CC: exim-users
Subject: Re: [EXIM] how can accept msg when its coming from ip
On Wed, 3 Dec 1997, The UNIX Mighty! wrote:

>    by defualt exim rejects mail if reverse-dns is not resolved for
> the incoming ip rite?? (no/mismatch ptr record and so on....) 
> eg
> ------------------------------------------------------------------------------
> 1997-12-03 16:08:27 connection from [207.155.118.xx] refused (reject host)
> ------------------------------------------------------------------------------

>
> how can I disable checking reverse dns calls or something...


This happens if you specify any wildcards in your sender_host_reject
list. If it can't look up the name, it can't check, and it takes the
hard line - otherwise somebody you are trying to lock out can just
remove their DNS entries to bypass your blocks.

There are several ways round this:

(1) Do not use wildcards in the block. If you use complete names, Exim
does a forward lookup when the daemon starts, and then checks IP
addresses.

(2) Set up your blocks using IP addresses instead of names; you can use
a net list to block a set of IP addresses.

(3) Wait for the next release of Exim, or install the testing version
which is currently available as Exim 1.750. This contains a new option
for host lists. If the item "+allow_unknown" appears, unresolved lookups
for subsequent items do not cause rejection.


-- 
Philip Hazel                   University Computing Service,
ph10@???             New Museums Site, Cambridge CB2 3QG,
P.Hazel@???          England.  Phone: +44 1223 334714



--
*** Exim information can be found at http://www.exim.org/ ***