I have the following configuration:

Internet
    | (T1)
Router
    |
Raptor Firewall (6.5.3, NT4)
    |
    +-- Imail 7.13 server (horizonint.com)
    |   (192.168.1.23)
    |
Imail 8.05 server (cf.horizonint.com)
(192.168.1.21)

I have one account on horizonint.com forwarded to cf.horizonint.com.  I do
not have any of Verify MAIL FROM, perform reverse DNS, or verify HELN/EHLO
checked
but I'm getting entries in the SPAMmmdd.log:

02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION: (MAIL
FROM) cf.horizonint.com FAILED to validate MAIL FROM address
[EMAIL PROTECTED]
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION: (MAIL
FROM) <[EMAIL PROTECTED]> user does not exist on remote system
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION:
(REVDNS) cf.horizonint.com FAILED reverse DNS validation for address
(192.168.1.23)
02:27 15:56 SMTPD(049B003C) [00003196] <cf.horizonint.com> VALIDATION:
(REVDNS) 192.168.1.23 address does not have a valid MX or A record, FAILED
check

The email has both X-IMAIL-SPAM-VALFROM and X-IMAIL-SPAM-REVDNS headers.

In addition, an ethereal capture shows a DNS query for
23.1.168.192.in-addr.arpa
with a response of horizonint.com from the firewall.

Can anyone explain what going on here?

Thanks,

Brad Morgan





To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to