RE: [exim] temporarily rejected RCPT from my ISP relay MTAs

Top Page
Delete this message
Reply to this message
Author: Rick Cooper
Date:  
To: R.B. \(Rick\), exim-users
CC: 
Subject: RE: [exim] temporarily rejected RCPT from my ISP relay MTAs


> -----Original Message-----
> From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org]On
> Behalf Of R.B. (Rick)
> Sent: Thursday, December 30, 2004 8:34 AM
> To: exim-users@???
> Subject: [exim] temporarily rejected RCPT from my ISP relay MTAs
>
>
> Hi all,
> i've a problem with ISP MTAs... i have thousand of these logs line per
> minute:
>
> 2004-12-30 14:25:20 H=(big-1c.inet.it) [213.92.5.8]
> F=<qjgehyk@???> temporarily rejected RCPT
> <hatbox@???>: Could not complete sender verify
> 2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> F=<czamjneafa@???> temporarily rejected RCPT
> <etnean@???>: Could not complete sender verify
> 2004-12-30 14:25:20 H=(big-1c.inet.it) [213.92.5.8]
> F=<qjgehyk@???> temporarily rejected RCPT
> <armys@???>: Could not complete sender verify
> 2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> F=<czamjneafa@???> temporarily rejected RCPT
> <bair@???>: Could not complete sender verify
> 2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> F=<czamjneafa@???> temporarily rejected RCPT
> <adlewis@???>: Could not complete sender verify
> 2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> F=<czamjneafa@???> temporarily rejected RCPT
> <araiva@???>: Could not complete sender verify
>
> This, i think, is due to spammers that send directly to secondary MXs...
> how can i avoid to respond temporarily reject on DNS problems and return
> instead a permanent error?
>


Well the first thing I see:
The mx records for buffymail.com point to nullmx.domainmanager.com which
resolves to 0.0.0.0

The mx records for passengers.com point to localhost.fabulous.com which
resolves to 127.0.0.1

both of which are invalid and exim will never be able to verify sender. I
also noted that the helo host is listed as a free mail server, which may
well explain why you are having troubles with mail originating from there.

Are these thousands of lines from same/similar email addresses and/or the
same .inet.it?

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.