Re: [exim] Backscatter & Sender callouts.

Top Page
Delete this message
Reply to this message
Author: Grant Peel
Date:  
To: Chris Wilson
CC: exim-users
Subject: Re: [exim] Backscatter & Sender callouts.
CHris,

Fair enough question...

We noticed that there are a few outside receiving servers that are rejecting
email because our server is listed on backscatter dor org. As you can see
from the config below, we also check this list.

How it relates is: I want the config to send bounces to our (local) users
only, if one is necessary. If I understand that backscatter thing correctly,
If we sent to an outside server with a F=<> and there is more than on
recipient, we could keep getting blacklisted to ips.backscatterer.org. So
sending local bounces only should cure that (should it not?).

-Grant

----- Original Message -----
From: "Chris Wilson" <chris@???>
To: "Grant Peel" <gpeel@???>
Cc: <exim-users@???>
Sent: Thursday, October 29, 2009 6:54 AM
Subject: Re: [exim] Backscatter & Sender callouts.


> Hi Grant,
>
> On Wed, 28 Oct 2009, Grant Peel wrote:
>
>> I am having a problem with a server getting listed on
>> ips.backscatterer.org.
>
> I'm not 100% sure that I understand the problem. Is it your server that's
> getting listed on IBO or someone else's that you want to receive mail
> from? And how does this relate to the next question:
>
>> I have been researchng and reviewing the config shown below, but am not
>> 'getting it'.
>>
>> I want to allow bounces to local addresses only.
>
> This condition doesn't do that:
>
>         deny    senders         = :
>                 ! hosts         = +whitelist
>                 dnslists        = ips.backscatterer.org
>                 message         = This message looks like a bounce, and 
> your
> server is listed at \

>
> Probably you want to add:
>
> ! domains = +local_domains
>
>> Also, I am not so sure I understand the verify / callback process vrs.
>> the config below.
>
> I don't see any callouts (verify = sender/callout or verify =
> recipient/callout) in the config, so I'm guessing your Exim is doing the
> default verification: validating local users, and validation remote
> domains (but not users at those domains).
>
> If you separated the verbs in your ACL it would be a little easier to
> read.
>
> Cheers, Chris.
> -- 
> _ ___ __     _
>  / __/ / ,__(_)_  | Chris Wilson <0000 at qwirx.com> - Cambs UK |
> / (_/ ,\/ _/ /_ \ | Security/C/C++/Java/Perl/SQL/HTML Developer |
> \ _/_/_/_//_/___/ | We are GNU-free your mind-and your software |

>
>