On Fri, 12 Apr 2002, dman wrote:
> On Fri, Apr 12, 2002 at 09:29:42AM +0100, Philip Hazel wrote:
> | On Thu, 11 Apr 2002, dman wrote:
> |
> | > hostlist not_rbl_hosts = <, !192.168.0.0/23 , !127.0.0.1/32 , !::1
> | >
> | > warn hosts = +not_rbl_hosts : !129.21.30.24
> | > dnslists = \
> | > dsn.rfc-ignorant.org/$sender_address_domain : \
> | > postmaster.rfc-ignorant.org/$sender_address_domain : \
> | > abuse.rfc-ignorant.org/$sender_address_domain
> | > message = X-RBL-Warning: $sender_address_domain , $dnslist_domain , $dnslist_value , $dnslist_text
> | > log_message = RBL : $sender_address_domain , $dnslist_domain , $dnslist_value , $dnslist_text
> | >
> | >
> | > I got this in my rejectlog :
> | >
> | > 2002-04-11 19:07:44 H=(martha.itusa.org) [192.168.0.4] Warning: RBL : 192.168.0.4 , abuse.rfc-ignorant.org , 127.0.0.4 , Not supporting abuse@domain
> |
> | > My understanding is that that message shouldn't have been checked at
> | > all because it came from 192.168.0.4 (the internal side of that host).
> | > As it was, the domain in the Reply-To: is what failed the test.
> | >
> | > Why was this message checked?
> |
> | You have fallen into a trap/confusion. Unfortunately, the flexibility of
> | all of this introduces complications that aren't always easy to check
> | out. The interactions between negations and named host lists don't
> | always work the way people expect.
> |
> | Your case works like this:
> |
> | . Exim sees "+not_rbl_hosts", so goes away to check if the host
> | matches that named list.
> |
> | . 192.168.0.0/23 does match 192.168.0.4, so the answer is "no, it
> | doesn't match +not_rbl_hosts".
>
> | (Your name is a bit confusing. It should surely be "rbl_hosts",
> | shouldn't it?)
>
> It was named that, but when I went through the config again it seemed
> to be the opposite of what it is intended to be. It is supposed to be
> a list of hosts that are not to be checked against any rbls. "rbl
> hosts" sounds, to me at least, like something that would be rbled.
Actually, its both - but since positive matches cause a host to be
checked, the original name is correct.
