I have the following configuration:
Internet
| (T1)
Router
|
Raptor Firewall (6.5.3, NT4)
|
+-- Imail 7.13 server (horizonint.com)
| (192.168.1.23)
|
Imail 8.05 server (cf.horizonint.com)
(192.168.1.21)
I have one account on horizonint.com forwarded to cf.horizonint.com. I do
not have any of Verify MAIL FROM, perform reverse DNS, or verify HELN/EHLO
checked
but I'm getting entries in the SPAMmmdd.log:
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION: (MAIL
FROM) cf.horizonint.com FAILED to validate MAIL FROM address
[EMAIL PROTECTED]
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION: (MAIL
FROM) <[EMAIL PROTECTED]> user does not exist on remote system
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION:
(REVDNS) cf.horizonint.com FAILED reverse DNS validation for address
(192.168.1.23)
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION:
(REVDNS) 192.168.1.23 address does not have a valid MX or A record, FAILED
check
The email has both X-IMAIL-SPAM-VALFROM and X-IMAIL-SPAM-REVDNS headers.
In addition, an ethereal capture shows a DNS query for
23.1.168.192.in-addr.arpa
with a response of horizonint.com from the firewall.
Can anyone explain what going on here?
Thanks,
Brad Morgan
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/