[exim] strange rbl question..

Top Page
Delete this message
Reply to this message
Author: Brian
Date:  
To: exim-users
Subject: [exim] strange rbl question..
I took in an email that I feel I shouldn't have, due to it's existence
on the spamcop dnsbl.

2005-03-03 09:41:03 1D6rVb-000Abe-U4 H=(website2000.it) [62.149.225.55]
Warning: [SPAM] 8.5
2005-03-03 09:41:03 1D6rVb-000Abe-U4 <= anonymous@???
H=(website2000.it) [62.149.225.55] P=smtp S=2769
id=20050303130201.15071.qmail@??? T="Proposal"
2005-03-03 09:41:03 1D6rVb-000Abe-U4 => email@??? R=dnslookup
T=remote_smtp H=a.mx.domain.org [192.168.2.147] QT=4s DT=0s
2005-03-03 09:41:03 1D6rVb-000Abe-U4 Completed

It was actually sent to someone that has a forward so it went back out
again..

2005-03-03 09:41:03 1D6rVf-000Abj-K9 <= anonymous@??? 
H=(mailbox.domain.org) [192.168.2.147] P=esmtp S=3701 
id=20050303130201.15071.qmail@??? T="[SPAM] Proposal"
2005-03-03 09:41:17 1D6rVf-000Abj-K9 ** user@??? R=dnslookup 
T=remote_smtp: SMTP error from remote mailer after end of data: host 
mailin-03.mx.aol.com [64.12.138.120]: 554-:  (RLY:CS2) 
http://postmaster.info.aol.com/errors/554rlycs.html\n55     4 
TRANSACTION FAILED
2005-03-03 09:41:18 1D6rVu-000Abp-0l <= <> R=1D6rVf-000Abj-K9 U=mailnull 
P=local S=4710 T="Mail delivery failed: returning message to sender"
2005-03-03 09:41:18 1D6rVf-000Abj-K9 Completed


and when I look at 9:45 am I see this:
http://www.spamcop.net/bl.shtml?62.149.225.55

in my acl_smtp_rcpt I have these dnslists defined (like this)

  dnslists       = list.dsbl.org : sbl-xbl.spamhaus.org : 
dul.dnsbl.sorbs.net
  dnslists       = dnsbl.ahbl.org :  bl.spamcop.net


I'm wondering if this is my problem?

I do have other entries in my exim logs showing me that this does work..

2005-03-03 07:02:53 H=(cm61-15-48-120.hkcable.com.hk) [61.15.48.120]
F=<Russ.Kay@???> rejected RCPT <user@???>: DNSBL
bl.spamcop.net
2005-03-03 09:36:36 H=(c-24-1-138-157.client.comcast.net) [24.1.138.157]
F=<SerenadsqpDoljac@???> rejected RCPT <user@???>: DNSBL
bl.spamcop.net

Does anyone have any ideas how this happened?