RE: [exim] temporarily rejected RCPT from my ISP relay MTAs

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Rick Cooper
Date:  
À: R.B. \(Rick\), exim-users
CC: 
Sujet: RE: [exim] temporarily rejected RCPT from my ISP relay MTAs


> -----Original Message-----
> From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org]On
> Behalf Of R.B. (Rick)
> Sent: Friday, December 31, 2004 6:26 AM
> To: exim-users@???
> Subject: Re: [exim] temporarily rejected RCPT from my ISP relay MTAs
>
>
> Rick Cooper wrote:
>
> >
> >
> >>-----Original Message-----
> >>From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org]On
> >>Behalf Of R.B. (Rick)
> >>Sent: Thursday, December 30, 2004 9:56 AM
> >>To: exim-users@???
> >>Subject: Re: [exim] temporarily rejected RCPT from my ISP relay MTAs
> >>
> >>
> >>Rick Cooper wrote:
> >>
> >>
> >>
> >>>
> >>>
> >>>>-----Original Message-----
> >>>>From: exim-users-bounces@???
> [mailto:exim-users-bounces@exim.org]On
> >>>>Behalf Of R.B. (Rick)
> >>>>Sent: Thursday, December 30, 2004 8:34 AM
> >>>>To: exim-users@???
> >>>>Subject: [exim] temporarily rejected RCPT from my ISP relay MTAs
> >>>>
> >>>>
> >>>>Hi all,
> >>>>i've a problem with ISP MTAs... i have thousand of these logs line per
> >>>>minute:
> >>>>
> >>>>2004-12-30 14:25:20 H=(big-1c.inet.it) [213.92.5.8]
> >>>>F=<qjgehyk@???> temporarily rejected RCPT
> >>>><hatbox@???>: Could not complete sender verify
> >>>>2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> >>>>F=<czamjneafa@???> temporarily rejected RCPT
> >>>><etnean@???>: Could not complete sender verify
> >>>>2004-12-30 14:25:20 H=(big-1c.inet.it) [213.92.5.8]
> >>>>F=<qjgehyk@???> temporarily rejected RCPT
> >>>><armys@???>: Could not complete sender verify
> >>>>2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> >>>>F=<czamjneafa@???> temporarily rejected RCPT
> >>>><bair@???>: Could not complete sender verify
> >>>>2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> >>>>F=<czamjneafa@???> temporarily rejected RCPT
> >>>><adlewis@???>: Could not complete sender verify
> >>>>2004-12-30 14:25:20 H=(fe-3a.inet.it) [213.92.5.105]
> >>>>F=<czamjneafa@???> temporarily rejected RCPT
> >>>><araiva@???>: Could not complete sender verify
> >>>>
> >>>>This, i think, is due to spammers that send directly to
> secondary MXs...
> >>>>how can i avoid to respond temporarily reject on DNS problems
> and return
> >>>>instead a permanent error?
> >>>>


<snip>

> >Check your dnslookup: router and make sure the following two lines are
> >there (probably on the very end of the router), if not add them.
> >
> > ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
> > no_more
> >
> >this should cause Exim to consider the 0.0.0 and 127.0.0.0/8 addresses as
> >non existent and return a permanent error for those types of addresses.
> >
> >You can test this by issuing the command:
> >
> >exim -C /PathToYour/eximin.conf -bt czamjneafa@???
> >
> >and you should get something like:
> >
> >czamjneafa@??? is undeliverable:
> > all relevant MX records point to non-existent hosts
> >
> >Rick
> >
> >
> >
>
> My problem isn't in outbound but in inbound.... i would like to respond
> a permanent error during SMTP dialogue... is possible?
> Thanks
>


Yes, this addresses inbound mail, sender verification. Your problem is:

<bair@???>: Could not complete sender verify.

Now during the sender verify (inbound) you will pass through the dns router
which will look up the mx records for the given address and attempt a rcpt
to: the sender address to see if a bounce could be sent. When exim does the
mx lookup for the hosts above it is getting 127.0.0.1 and 0.0.0.0, these are
bogus addresses and exim will not be able to contact these hosts, resulting
in a "temporary error" deferral. If you make sure the two lines I gave you
are in your DNS router, when exim does the sender verification and receives
the bogus host addresses it will find them in the list of
ignore_target_hosts and treat them as though it received no address at all.
This will cause the router to decline (fail the test) and the no_more line
tells exim do not process any more routers for this address. Thus the sender
verify will fail and exim will return a 5xx and outright reject the
*inbound* mail.

I don't know about all of the problems you are having but I can tell you the
hosts you originally listed are a problem because their mx records are
bogus, exim gets an address it cannot reach and does what it should do, it
defers and issues a temporary problem error and the sending mail host retrys
as it should. If you make sure the two lines I gave you are in your dns
router this will stop and exim will reject those address, sender verify will
fail and you will issue a permanent 550 response to the inbound mailer.
This IS the problem with buffymail.com passengers.com and probably many/all
of the rest.

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.