Re: [exim] Paging Marc Perkel: rDNS on junkemailfilter.com c…

Top Page
Delete this message
Reply to this message
Author: Larry Rosenman
Date:  
To: 'Marc Perkel'
CC: exim-users, 'John W. Baxter'
Subject: Re: [exim] Paging Marc Perkel: rDNS on junkemailfilter.com checking host(s)
a list I use. (It's not totally public).

It catches a LOT of the junk from bad-looking rDNS.

I'll ask if I can reveal details.




--
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 512-248-2683             E-Mail: ler@???
US Mail: 430 Valona Loop, Round Rock, TX 78681-3893 




_____

From: Marc Perkel [mailto:marc@perkel.com]
Sent: Thursday, November 09, 2006 7:20 PM
To: Larry Rosenman
Cc: John W. Baxter; exim-users@???
Subject: Re: [exim] Paging Marc Perkel: rDNS on junkemailfilter.com checking
host(s)




Larry Rosenman wrote:

On Thu, 9 Nov 2006, John W. Baxter wrote:





On 11/9/06 8:53 AM, "Larry Rosenman" <mailto:ler@lerctr.org>
<ler@???> wrote:





Marc Perkel wrote:



Larry Rosenman wrote:



Marc Perkel,

    Your junkemailfilter.com server that does the sender verify has


what looks to be dynamic/generic rDNS. This causes MY server to

reject your sender verify:

Nov 8 08:12:24 thebighonker exim[32310]: H=5.ctyme.com

(pascal.ctyme.com) [69.50.231.5]:35579 I=[192.147.25.65]:25

F= <mailto:sender-verify@junkemailfilter.com>
<sender-verify@???> rejected RCPT

<mailto:ler@lerctr.org> <ler@???>: EL: () in EL list



Can you get the rDNS to be more legitimate?



Thanks,

Larry Rosenman

(Sorry for taking THIS lists bandwidth, but I know Marc is on it, and

I can't email him Directly because of this).





Well, the reverse lookup is 5.ctyme.com - I suppose I could change

that but why do you think it's dynamic?



Dynamic/Generic (I.E. it looks like just a generic place holder).



So would five.ctyme.com also trigger your filter, Larry (assuming that both

A and PTR were changed)? There isn't exactly a huge difference between the

names 5.cytime.com and five.cytime.com.



1) the pattern *WAS* [0-9]+.ctyme.com

2) it's been removed.






That's interesting - where did this pattern [0-9]+.ctyme.com come from
originally?