Re: [exim] Backscatter Spam Again. HELP PLEASE!

Top Page
Delete this message
Reply to this message
Author: Dave Evans
Date:  
To: exim-users
Subject: Re: [exim] Backscatter Spam Again. HELP PLEASE!
On Tue, Mar 04, 2008 at 03:28:57PM +0000, Dave Evans wrote:
> grep '<= <> .* P=local' mainlog | head -5 | \
> while read L ; do set $L ; \
> zgrep -h ${6#R=} `ls -tr mainlog*` ; zgrep -h $3 `ls -tr mainlog*` ; \
> echo; done


(Grant replied off-list and provided the output).

OK, so what that at least partly shows is that the bounces are for postmaster
addresses, e.g. postmaster@??? and postmaster@???.
Which is fair enough, as your RCPT ACL unconditionally accepts all mail for
local postmasters:

accept  local_parts   = postmaster
        domains       = +local_domains


(I'm assuming that those two domains are in your +local_domains list).

The problem is that it turns out those address aren't routeable, which
presumably means they neither have a specific mapping for "postmaster", nor a
catch-all.

Work out where you want your postmaster mail to go - it's always got to go
somewhere, of course - then update your routers / lookup files. Test the
changes with "exim -bt postmaster@???" (etc), restart exim,
and let us know if it helps or not.

Regards,

--
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey