From: /dev/rob0 (rob0gmx.co.uk)
Date: Wed Aug 09 2006 - 09:45:20 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wednesday 09 August 2006 09:14, Clodoaldo Pinto wrote:
> I have this message in my log:
> Aug 9 12:10:55 rm-1004-05 postfix/smtpd[31829]: warning:
> 65.23.153.13: address not listed for hostname rm-1004-05.serve.com
>
> I have read the FAQ section about it at
> http://www.postfix.org/faq.html#paranoid
>
> It seems to me that both the reverse DNS entry and the A record
> are OK:

Now, sure. But apparently not at Aug 9 12:10:55 -0200 (or whatever
timezone.) It could have been a transient DNS failure, or possibly the
serve.com zone was changed.

Was it a spam? I see that this IP is listed at Spambag (but no other
RBL's.) It seems that many spammers are doing rapid changes in both
forward and reverse DNS to try to stay a jump or two ahead of those who
are trying to list them.

[when I saw your post]
serve.com. 40000 IN SOA ns1.serve.com. root.serve.com. 1155132035 16384 2048 1048576 2560
[just before I sent this]
serve.com. 40000 IN SOA ns1.serve.com. root.serve.com. 1155133837 16384 2048 1048576 2560

hmmmm ...

check_mumble_ns_access is the future of spam control! Access control
based on the client in-addr.arpa. NS records would be handy, too, but I
don't see how to do that natively in Postfix. (A policy service could
do it.)
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]