--On 31 May 2007 08:49:32 +0100 Alun <auj@???> wrote:
> Hi all,
>
> On 22nd May we upgraded our mail servers to exim 4.67. Since then we've
> been having problems with mail from wales.ac.uk. Mail from them
> originates from 194.80.131.5 which has multiple reverse DNS records.
>
> One of my ACLs whitelists all servers having $sender_host_name end with
> ".ac.uk" so that spam scanning isn't performed.
I'm no expert on DNS, but the entry looks unusual. Is it legal:
chip-39 % host 194.80.131.5
5.131.80.194.in-addr.arpa domain name pointer *.ezproxy.library.wales.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer mail.cymru.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer mail.wales.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer uwrz05.wales.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer uwrz46.cymru.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer uwrz46.wales.ac.uk.
5.131.80.194.in-addr.arpa domain name pointer ezproxy.library.wales.ac.uk.
Multiple results are legal, but unusual. What about the wildcard?
> This check no longer
> works, on 194.80.131.5 so mail coming from there is getting the full
> anti-spam checking. wales.ac.uk has a bunch of addresses that are pure
> forwarding addresses to aber.ac.uk, and the administrator of the domain
> is complaining about the rejections that are now happening as a result.
>
> I've not yet hacked my ACLs to log precisely what is now in
> $sender_host_name...
>
> Obviously I can whitelist the specific IP (and others, as they come
> along), but I thought I'd just raise this here - I can't see anything
> in the ChangeLog that specifically mentions the change. Was this
> intentional or a bug?
>
> Cheers,
> Alun.
>
> --
> Alun Jones auj@???
> Systems Support, (01970) 62 2494
> Information Services,
> University of Wales, Aberystwyth
--
Ian Eiloart
IT Services, University of Sussex
x3148
