On Fri, 2014-09-26 at 11:12 +1000, Ted Cooper wrote: > On 26/09/14 10:40, Always Learning wrote: > > EXDIR/hosts.spammer contains, inter alia, > > > > *charter.com > > *mo.charter.com > > > > Exim fails to match a persistent nuisance > > > > 71-14-255-2.static.stls.mo.charter.com > > > > when the condition is > > > > hosts = EXDIR/hosts.spammer > > I assume it's because it can't get a hostname to do the match against. > Exim doesn't set the $sender_host_name variable until that name is > verified - in this case, the hostname does not exist. If the "hosts" > condition is basing the search off that, then it will have nothing to > search against. Run it through with exim -bh to see what it's trying to > match. > > $ host 71-14-255-2.static.stls.mo.charter.com > Host 71-14-255-2.static.stls.mo.charter.com not found: 3(NXDOMAIN) > > http://www.exim.org/exim-html-current/doc/html/spec_html/ch-access_control_lists.html#SECTaclconditions > > "It can test IP addresses without doing any DNS lookups, but when it > reaches an item that requires a host name, it fails if it cannot find a > host name to compare with the pattern" > > Not trusting a PTR until it can be confirmed to be valid makes sense to > me, or every spammer would just set their PTR to something trusted by > the target server.
Hi Ted, Brilliant. Thank you very much. I was completely puzzled and never thought of doing a 'host' on it. Will block the IP now. Much appreciated and thanks again. Paul. England, EU. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
