Scott:
The moment I put on the latest 155i this afternoon, I started getting
massive false reports of Reverse DNS missing. It took until now before I
realized it was NOT my DNS servers etc.
The problem is, that Declude does not look up the IP address, but rather
looks up " ".
Here is a sample message:
06/29/2002 03:19:44 Q5f8d234b01021e89 REVDNS:5 HELOBOGUS:3 . Total weight =
8
06/29/2002 03:19:44 Q5f8d234b01021e89 Msg failed REVDNS (This E-mail was
sent from a mail server with no reverse DNS entry.).
06/29/2002 03:19:44 Q5f8d234b01021e89 Msg failed HELOBOGUS (Domain
[EMAIL PROTECTED] by has no MX/A records.).
06/29/2002 03:19:44 Q5f8d234b01021e89 Msg failed WEIGHT8 (Weight of 8
reaches or exceeds the limit of 8.).
06/29/2002 03:19:44 Q5f8d234b01021e89 Subject: (no subject)
06/29/2002 03:19:44 Q5f8d234b01021e89 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
Notice how it has a single blank in the REVDNS warning where the IP would
normally go. But, if you inspect the X-Declude header, it correctly
identifies the IP address as: [152.163.225.105].
Received: from imo-r09.mx.aol.com [152.163.225.105] by hm-software.com with
ESMTP
(SMTPD32-7.07) id AF8D234B0102; Sat, 29 Jun 2002 03:19:41 -0400
Received: from [EMAIL PROTECTED]
by imo-r09.mx.aol.com (mail_out_v32.21.) id 5.138.1083966e (1320)
for <[EMAIL PROTECTED]>; Sat, 29 Jun 2002 03:19:36 -0400 (EDT)
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Date: Sat, 29 Jun 2002 03:19:35 EDT
Subject: SPAM: [See Headers] (no subject)
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="part1_138.1083966e.2a4eb987_boundary"
X-Mailer: AOL 7.0 for Windows US sub 10509
X-RBL-Warning: Suspected SPAM. Domain [EMAIL PROTECTED] by has no MX/A
records.
X-Declude: Version 1.55i; D5f8d234b01021e89.SMD from [No Reverse DNS]
[152.163.225.105]
Return-Path: <[EMAIL PROTECTED]>
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 323384196
I'm also suddenly seeing a LARGE amount of messages like this - with all
kind of strange "strings", such as "App1":
06/29/2002 03:21:18 Q5fec03b2029e92bb WARNING: DNS server returned a SERVER
FAILURE error for App1.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
