Re: [Exim] IP coming directly from hell?

Top Page
Delete this message
Reply to this message
Author: William Thompson
Date:  
To: Andreas Gietl
CC: exim-users@exim.org
Subject: Re: [Exim] IP coming directly from hell?
> sorry for the HUGE debug-log at the end of this mail.
>
> I am experiencing a very strang problem on an exim-4.14 server.
>
> I just describe the situation:
>
> - client logs on from ip 80.136.241.103
> - exim checks relay_from_hosts - but not looks up 80.136.241.103. It looks up
> for 217.7.0.61.29 and then of course rejects the relay

                ^
that's not an IP address.  Check your file and see if you meant
217.7.0.61/29 instead.  However, that's not a correct CIDR address.


> I tried to figure out where this "IP" - which is none - comes from, but i
> could not find a source for it.
>
> This happens on some remote-adresses, but not with all. But it is allways the
> same "ip" that comes, maybe, directly from hell in to exim.
>
> These are a few important snippets from the configuration:
>
> hostlist relay_from_hosts = 127.0.0.1 : /etc/relayhosts
>
> /etc/relayhosts is a file of the format:
>
> 80.136.241.103 # 1049896544
> 127.0.0.1 # 1049896544


Looks ok, but why the "# 1049896544" afterwords?

> including about 300-400 hosts at the time the error occurs.
>
> in acl:
>
>   accept  hosts         = +relay_from_hosts
>   deny    message       = relay not permitted
>           log_message   = relay not permitted


Looks ok, but you don't need log_message if it's the same as message.

> I put the whole debug-output of the connection at the end of the mail. It is
> unabridged, i just changed the hostnames.
>
> Any ideas? If you need furhter information, don't hesitate to contact me.