Re: [Exim] Puzzling RBL rejections

>I'm getting some troubling reject log entries that point to RBL rejections
>and I'm not sure what's going on. System is Linux 2.4.19 (Debian) and Exim
>4.20.
>
>Log entry: (#=@)
>
>2003-07-14 17:50:21 H=wsip-24-234-60-77.lv.lv.cox.net
>(twmail.terrawest.com) [24.234.60.77] F=<PWood#TerraWest.com> rejected RCPT
><dpursiano#pursianolaw.com>: (ACL) RBL rejection

It's possible that the IP in question was running an open proxy or relay,
got listed and subsequently fixed, so that you saw a bounce one day and
not the next.

By the way, the relays.osirusoft.com zone INCLUDES spews.relays.osirusoft.com
so your "warning" test on the latter will never be triggered. It also
includes sbl.relays.osirusoft.com (the SpamHaus SBL), an open proxies list
(proxies.relays.osirusoft.com) and dialups.relays.osirusoft.com. Another
possible explanation for the rejection is therefore that the IP was
temporarily in the SPEWS list.

Cheers,

Dave Stone