Thread: Continued mail server problems for all PGSQL mailing lists I'm on
I'm actually getting the mailing list mail, so I don't know what the deal is. Successful deliveries are coming from 64.117.225.209. But 207.173.200.206 has big problems. Sendmail is misconfigured in at least two ways. DNS is not even configured at all for reverse DNS. I can't whitelist the sender email addresses because spammers already use them. I can't whitelist the IP address because you guys keep changing them. I can't whitelist the server domain because the reverse DNS isn't set up yet (it takes me less than 5 minutes to set that up). I'm sure the list operators are experts in PostgreSQL. I'm not. But at least I don't pretend to be. Maybe you should ask some experts in running mailing lists, mail servers, and DNS servers, to give you a hand. -- ----------------------------------------------------------------------------- | Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ | | (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ | -----------------------------------------------------------------------------
On Sat, 9 Aug 2003, Phil Howard wrote: > I'm actually getting the mailing list mail, so I don't know what the > deal is. Successful deliveries are coming from 64.117.225.209. But > 207.173.200.206 has big problems. 207.173.200.206? We aren't using that server for relaying ... we *are* using: 207.173.200.143, which does reverse: %nslookup 207.173.200.143 Server: neptune.hub.org Address: 64.117.224.130 Name: hosting.commandprompt.com Address: 207.173.200.143 Joshua, are there multiple IPs on that box that he might be seeing?
On Sat, Aug 09, 2003 at 07:40:24PM -0300, The Hermit Hacker wrote: | On Sat, 9 Aug 2003, Phil Howard wrote: | | > I'm actually getting the mailing list mail, so I don't know what the | > deal is. Successful deliveries are coming from 64.117.225.209. But | > 207.173.200.206 has big problems. | | 207.173.200.206? We aren't using that server for relaying ... we *are* | using: 207.173.200.143, which does reverse: | | %nslookup 207.173.200.143 | Server: neptune.hub.org | Address: 64.117.224.130 | | Name: hosting.commandprompt.com | Address: 207.173.200.143 | | Joshua, are there multiple IPs on that box that he might be seeing? Then is 207.173.200.206 a spammer running Sendmail and faking these mailing lists? -- ----------------------------------------------------------------------------- | Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ | | (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ | -----------------------------------------------------------------------------
Phil Howard wrote: >On Sat, Aug 09, 2003 at 07:40:24PM -0300, The Hermit Hacker wrote: > >| On Sat, 9 Aug 2003, Phil Howard wrote: >| >| > I'm actually getting the mailing list mail, so I don't know what the >| > deal is. Successful deliveries are coming from 64.117.225.209. But >| > 207.173.200.206 has big problems. >| >| 207.173.200.206? We aren't using that server for relaying ... we *are* >| using: 207.173.200.143, which does reverse: >| >| %nslookup 207.173.200.143 >| Server: neptune.hub.org >| Address: 64.117.224.130 >| >| Name: hosting.commandprompt.com >| Address: 207.173.200.143 >| >| Joshua, are there multiple IPs on that box that he might be seeing? > >Then is 207.173.200.206 a spammer running Sendmail and faking these mailing >lists? > > > 206 is another one of our machines, which I am requesting they fix the reverse mapping. Different machine, different purpose. Not sure why/how you shoud be getting any issues from that machine on this list. Can you forward me the email that was sent to you from said ip? Thanks, Robby -- Robby Russell, | Sr. Administrator / Lead Programmer Command Prompt, Inc. | http://www.commandprompt.com rrussell@commandprompt.com | Telephone: (503) 222.2783
On Sat, 9 Aug 2003, Phil Howard wrote: > | %nslookup 207.173.200.143 > | Server: neptune.hub.org > | Address: 64.117.224.130 > | > | Name: hosting.commandprompt.com > | Address: 207.173.200.143 > | > | Joshua, are there multiple IPs on that box that he might be seeing? > > Then is 207.173.200.206 a spammer running Sendmail and faking these mailing > lists? My first guess is that the machine we are using @ CommandPrompt as a relay point has multiple IPs on it, and the outbound IP is being seen as 206, while we're sending i through 143 ...
In response to "Phil Howard": >> 207.173.200.206? We aren't using that server for relaying ... we >> *are* using: 207.173.200.143, which does reverse: >> %nslookup 207.173.200.143 >> Server: neptune.hub.org >> Address: 64.117.224.130 >> Name: hosting.commandprompt.com >> Address: 207.173.200.143 >> Joshua, are there multiple IPs on that box that he might be seeing? > Then is 207.173.200.206 a spammer running Sendmail and faking these > mailing lists? FWIIW server response through Telnet: 220 localhost.localdomain ESMTP Sendmail 8.11.6/8.11.6; Sat, 9 Aug 2003 16:00:03 -0700 HansH
On Sat, Aug 09, 2003 at 08:05:58PM -0300, The Hermit Hacker wrote:
> On Sat, 9 Aug 2003, Phil Howard wrote:
> > Then is 207.173.200.206 a spammer running Sendmail and faking these mailing
> > lists?
>
> My first guess is that the machine we are using @ CommandPrompt as a relay
> point has multiple IPs on it, and the outbound IP is being seen as 206,
> while we're sending i through 143 ...
FWIW, the headers of your email contain the following:
From pgsql-general-owner+M46851=kleptog=svana.org@postgresql.org Sun Aug 10 09:27:21 2003
Received: from (hosting.commandprompt.com) [207.173.200.206]
by svana.org with esmtp (Exim 3.35 #1 (Debian))
id 19ld7I-00040e-00; Sun, 10 Aug 2003 09:27:20 +1000
Received: from postgresql.org (developer.postgresql.org [64.117.224.193])
by hosting.commandprompt.com (8.11.6/8.11.6) with ESMTP id h79NRAK09068
for <kleptog@svana.org>; Sat, 9 Aug 2003 16:27:13 -0700
Hope this helps,
--
Martijn van Oosterhout <kleptog@svana.org> http://svana.org/kleptog/
> "All that is needed for the forces of evil to triumph is for enough good
> men to do nothing." - Edmond Burke
> "The penalty good people pay for not being interested in politics is to be
> governed by people worse than themselves." - Plato
Attachment
>207.173.200.206? We aren't using that server for relaying ... we *are* >using: 207.173.200.143, which does reverse: > >%nslookup 207.173.200.143 >Server: neptune.hub.org >Address: 64.117.224.130 > >Name: hosting.commandprompt.com >Address: 207.173.200.143 > >Joshua, are there multiple IPs on that box that he might be seeing? > Yes it is because it is behind a firewall. See my other response. For some reason our reverse DNS request is being delayed. I actually made the request the same day you made yours (usually it is same day). I will double check with them on Monday.