On Tue, 22 Mar 2011, jon1234 wrote:

Hey Guys,

I'm fairly new to this spamassassin lark as I've just taken a new job so
please bear with me if my question is unrelated.

In a nutshell when my exchange users try to send to certain domains they get
the following bounce message.

<afnsecurity.com #5.5.0 smtp;550 "REJECTED - Bad HELO - Host impersonating
[afnsecurity.com]">

From where do they get that bounce message? From a host internal to your
network or from hosts out on the Internet?

I do have spam assassin installed but it was setup by my predecessor. After
googling the above error it has returned mostly results regarding exim. This
has caused me to suspect that maybe spamassassin has something to do with it
as I'm just running a SBS Exchange mailserver.

SA doesn't have anything to do with that.

Any help/points in the right direction would be very appreciated.

If that's coming from an internal MTA, I'd suggest that MTA doesn't believe your Exchange server is a legitimate source for mail from your domain. If that's coming from external MTA(s) then others on the public Internet apparently don't believe your public IP address is a legitimate source for mail from your domain. Do you publish SPF information or use Domainkeys? Has your public MTA's internet IP address changed recently?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  If guards and searches and metal detectors can't keep a gun out of
  a maximum-security solitary confinement prisoner's cell, how will
  a disciplinary policy and some signs keep guns out of a university?
-----------------------------------------------------------------------
 7 days until the M1911 is 100 years old - and still going strong!

Reply via email to