[Exim] unable to verify sender

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Adam Henry
Date:  
À: exim-users
Sujet: [Exim] unable to verify sender
Sorry for the generic subject--I know this message is asked about a
lot. Please take a look at this mail log:

    2002-06-19 13:31:21 17KjIf-0005oj-00 rejected from
    ponyexpress.marinar.com (mail.consolidatedplastics.com)
    [209.176.254.216]: temporarily unable to verify sender address
    <ggilkey@???> (try later)
    Recipients: ely@???
        francis@???
    P Received: from ponyexpress.marinar.com ([209.176.254.216]
    helo=mail.consolidatedplastics.com)
        by intrepid.marinar.com with esmtp (Exim 3.34 #1 (Debian))
        id 17KjIf-0005oj-00; Wed, 19 Jun 2002 13:31:21 -0400
    P Received: from Gilkey [162.40.170.211] by
    mail.consolidatedplastics.com with ESMTP
      (SMTPD32-6.06) id AF5565300BA; Wed, 19 Jun 2002 13:28:53 -0400
    I Message-ID: <007f01c217b7$24ffe7c0$0f00000a@???>
    F From: "Gregg Gilkey" <ggilkey@???>
    T To: "Mark Ely" <ely@???>


Now, Ponyexpress doesn't accept mail with <> as the mail from: field,
so there is a pretty good chance that this is the reason why mail is
being dropped. However, since I have control over this machine it is
easy for me to track down the source of spam that comes through it.
I would like to add any mail coming through this machine to a list
of hosts which will not be verified. Here is what I have done to do
this:

    sender_verify_hosts_callback = *
    sender_verify_callback_domains = ! /etc/exim/callback_whitelist : *
    host_reject = +warn_unknown: /etc/exim/blacklist
    sender_verify_hosts = ! verify_whitelist : *
    sender_verify = true
    headers_checks_fail = true


    $ cat verify_whitelist
    209.176.254.216


Please correct me if I'm wrong, but any domains explicitly excluded
from sender_verify_hosts will not be checked by
sender_verify_callback? Also, since the machine named
ponyexpress.marinar.com resolves to 209.176.254.216, can I use those
identifiers interchangeably?

Even with this configuration, I keep getting rejections from the above
mail address. I would greatly appreciate all ideas as to what I'm
missing from my configuration.

Second question, a little OT, but I would like to hear anyone's
opinion about this. What is the main justification for Exim (or any
other MTA) to not allow SMTP connections from address which are not
reverse-resolvable? Does this help identify spammers or other
illegitimate uses of mail?

Thanks again for all your help,
hank