Can you provide more of the headers?

You post from trutwins.homeip.net
Botnet complains about netbits.us and davidtrutwin.com
trutwins.homeip.net has no MX record
homeip.net MX isn't 209.18.107.89
davidtrutwin.com MX isn't 209.18.107.89
209.18.107.89 says fastconcepts.com in it's HELO

However, the DNS and PTR for 209.18.107.89 are fine.

Dan

-----Original Message-----
From: Josh Trutwin [mailto:[EMAIL PROTECTED]
Sent: Friday, January 26, 2007 2:25 PM
To: users@spamassassin.apache.org
Subject: Hmm - a server I manage is triggering Botnet


I'm the admin for the IP below and got this on a different server
I manage:

5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.7,ip=209.18.107.89,hostname=netbits.us,maildomain=davidtrutwin.com,
baddns]

I guess this is because of full-circle DNS, but I'm not sure how to
correct the issue.  I have this IP's reverse DNS setup like so:

# dnsname 209.18.107.89
ptr-20989.fastconcepts.net
# dnsip ptr-20989.fastconcepts.net
209.18.107.89

I thought this was correct for full-circle DNS?

Thanks,

Josh

Reply via email to