Re: [Exim] bounce from [0.0.0.0]

Pàgina inicial
Delete this message
Reply to this message
Autor: Philip Hazel
Data:  
A: Adam Henry
CC: exim-users
Assumpte: Re: [Exim] bounce from [0.0.0.0]
On Sun, 30 Jun 2002, Adam Henry wrote:

> Noticed something I never have seen before, any thoughts? Have a
> closer look at the IP address of the sender. The only harm I think
> this has done is to create a bounce loop, but should I be
> ultra-responsible and contact the DNS admin for E-Finance Network,
> LLC?


Which version of Exim? What is your config file?

> 17OmWi-0008TM-00 (what started it all):


Are you sure? Looks to me as though that *followed* from the original
message (whose id shows an earlier time) that bounced:

> And here is E17OmWf-0008Ss-00:
>
> > 2002-06-30 17:46:36 17OmWf-0008Ss-00 <= bxeasyqual@???
> > H=p17024.net.upc.nl (24.93.200.32) [212.142.17.24] P=smtp S=3134
> > T="Get the LOWEST Mortgage Rate and $ave like never before possible!
> > ynuo" from <bxeasyqual@???> for fryderyka@???


Message arrives.

> >
> > 2002-06-30 17:46:36 17OmWf-0008Ss-00 **
> > "fryderyka%marinar.com"@??? <fryderyka@???>
> > F=<bxeasyqual@???> R=lookuphost T=remote_smtp: SMTP
> > error from remote mailer after RCPT
> > TO:<"fryderyka%marinar.com"@???>: host
> > webslayer.marinar.com [64.241.86.36]: 550
> > <"fryderyka%marinar.com"@???>... User unknown


Relay delivery fails. Looks like some weirdness in the aliasing or
whatever, though. What turns fryderyka@??? into
"fryderyka%marinar.com"@????

> > 2002-06-30 17:46:36 17OmWf-0008Ss-00 Error message sent to
> > bxeasyqual@???


A bounce is generated.

> > 2002-06-30 17:46:36 17OmWf-0008Ss-00 Completed


That looks perfectly normal for a bounce.

Then you have:

> > 2002-06-30 17:46:36 17OmWi-0008TM-00 <= <> H=localhost
> > (intrepid.marinar.com) [127.0.0.1] P=esmtp S=4475
> > id=E17OmWi-0008TH-00@??? T="Mail delivery failed:
> > returning message to sender" from <> for bxeasyqual@???


I assume this follows because 17OmWi is greater than 17OmWf (2 seconds
later). However, that is weird, because Exim doesn't send its bounces by
connecting to 127.0.0.1. It uses a standard input connection. So there's
something unusual going on here.

You need to post more details of your configuration if you want further
comment.


--
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.