On Fri, 2014-09-26 at 11:12 +1000, Ted Cooper wrote:
> On 26/09/14 10:40, Always Learning wrote:
> > EXDIR/hosts.spammer contains, inter alia,
> >
> > *charter.com
> > *mo.charter.com
> >
> > Exim fails to match a persistent nuisance
> >
> > 71-14-255-2.static.stls.mo.charter.com
> >
> > when the condition is
> >
> > hosts = EXDIR/hosts.spammer
>
> I assume it's because it can't get a hostname to do the match against.
> Exim doesn't set the $sender_host_name variable until that name is
> verified - in this case, the hostname does not exist. If the "hosts"
> condition is basing the search off that, then it will have nothing to
> search against. Run it through with exim -bh to see what it's trying to
> match.
>
> $ host 71-14-255-2.static.stls.mo.charter.com
> Host 71-14-255-2.static.stls.mo.charter.com not found: 3(NXDOMAIN)
>
> http://www.exim.org/exim-html-current/doc/html/spec_html/ch-access_control_lists.html#SECTaclconditions
>
> "It can test IP addresses without doing any DNS lookups, but when it
> reaches an item that requires a host name, it fails if it cannot find a
> host name to compare with the pattern"
>
> Not trusting a PTR until it can be confirmed to be valid makes sense to
> me, or every spammer would just set their PTR to something trusted by
> the target server.
Hi Ted,
Brilliant. Thank you very much. I was completely puzzled and never
thought of doing a 'host' on it. Will block the IP now.
Much appreciated and thanks again.
Paul.
England, EU.
