It is doing some forwarding. The server in question is located at
216.29.45.197 it accepts mail for about 40 domains. It also acts as gateway
(it has that awesome declude anti-spam/virus software on it) for a secondary
server.
I took another look at the relay settings I had relay for address containing
these addresses:
216.29.45.0
10.0.0.0 (my dmz)
192.168.168.0 (my lan)
The second server also is set relay for addresses containing:
10.0.0.0 (my dmz)
192.168.168.0 (my lan)
After looking at this it occurred to me that I probably don't need the 216
zone now that i'm nat translated on the dmz.
here is the test ordb says i'm failing:
Return-Path:
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from fastmail.iaccorp.com (fastmail.iaccorp.com [216.29.45.213])
by BocksCar.ORDB.org (Postfix) with ESMTP id 9CB425574
for ; Wed, 23 Jul 2003 16:39:58 +0000 (GMT)
Received: from mail.iaccorp.com [10.0.0.197] by fastmail.iaccorp.com with
ESMTP
(SMTPD32-7.15) id ACBF8BE40148; Wed, 23 Jul 2003 12:50:07 -0400
Received: from ordb.org [212.242.88.2] by mail.iaccorp.com with ESMTP
(SMTPD32-7.15) id AC9B380208; Wed, 23 Jul 2003 12:49:31 -0400
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-ORDB-Envelope-From: [EMAIL PROTECTED]
X-ORDB-Envelope-To: @iaccorp.com:[EMAIL PROTECTED]
Subject: ORDB.org check (0.2826801175116810.3033135321) ip=216.29.45.197
Message-Id: <[EMAIL PROTECTED]>
Date: Wed, 23 Jul 2003 16:39:58 +0000 (GMT)
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 23, 2003 1:09 PM
Subject: Re: [IMail Forum] imail 7.15 filter question
>
> >Hello everyone. It seems that I've been put on the ordb blacklist for
> >having an open relay. From what I can tell it is because of a pretty
well
> >know mail hack: @something.com:[EMAIL PROTECTED]
>
> Interesting -- we don't show you listing in ORDB, but do show you listed
in
> DSBL.
>
> >I would think the easiest way to prevent this is with the use of imail
> >filters, but I can't seem to get it to work.
> >
> >I've created a rules.ima file and placed it in my imail directory the
> >contents of this file are:
> >
> >[EMAIL PROTECTED]:.*@:SPAMBOX
> >
> >Is this the correct filter string? Do I need to put it in every users
> >directory for every domain?
>
> The best thing to do is figure out why it is happening (for example, if
> "sowherelse.com" a domain that IMail acts as a gateway for? Does it allow
> relaying of any E-mail from the IMail server?).
>
> Since the E-mail is being relayed, a standard filter won't work (although
> an outbound filter might). When we first encountered this (actually, with
> "%" instead of ":" originally), IMail didn't support outbound filters, so
> we added a PERCENT test to Declude JunkMail that will block this type of
> E-mail.
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you have been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
