Re: [exim] Blacklist works strange

Top Page
Delete this message
Reply to this message
Author: W B Hacker
Date:  
To: exim users
Subject: Re: [exim] Blacklist works strange
James Brown wrote:
> FreeBSD 8.1-STABLE exim-4.72
>
> I included in my '/usr/local/etc/exim/dnsblists' some domains in the
> next format:
>
> shc.org
> bluewin.ch
> breakthru.com
>
> and had the next result:
>
> "H=moria.csail.mit.edu (moria.seul.org) [128.31.0.34]
> F=<owner-or-talk@???> rejected RCPT<user@???>:
> rejected because 128.31.0.34 is in a black list at breakthru.com\n" in
> my /var/log/exim/rejectlog
>
> But the ip-address of 128.31.0.34 is not belong to 'breakthru.com':
> dig -x 128.31.0.34
> 34.0.31.128.in-addr.arpa. 1800    IN    PTR    moria.csail.mit.edu.

>
> So, that blacklisting had as a result blocking the mail which I didn't
> want to block.
> What I did wrong or is there a bug in my version of an exim?
>


Appears that you are triggering a deny-class verb on EITHER a hit OR list
exhaustion without a hit.

Test by emplacing a bogus domain.tld after 'breaktrhu.com' and finding the
report now cites the new 'last entry' instead.

Then fix the logic in your acl so you reject ONLY on a 'hit'.


Bill