Continued mail server problems for all PGSQL mailing lists I'm on

Started by Phil Howardover 22 years ago8 messagesgeneral
Jump to latest
#1Phil Howard
phil-pgsql-general@ipal.net

I'm actually getting the mailing list mail, so I don't know what the deal is.
Successful deliveries are coming from 64.117.225.209. But 207.173.200.206 has
big problems. Sendmail is misconfigured in at least two ways. DNS is not
even configured at all for reverse DNS. I can't whitelist the sender email
addresses because spammers already use them. I can't whitelist the IP address
because you guys keep changing them. I can't whitelist the server domain
because the reverse DNS isn't set up yet (it takes me less than 5 minutes to
set that up). I'm sure the list operators are experts in PostgreSQL. I'm
not. But at least I don't pretend to be. Maybe you should ask some experts
in running mailing lists, mail servers, and DNS servers, to give you a hand.

--
-----------------------------------------------------------------------------
| Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ |
| (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ |
-----------------------------------------------------------------------------

#2The Hermit Hacker
scrappy@hub.org
In reply to: Phil Howard (#1)
Re: Continued mail server problems for all PGSQL mailing

On Sat, 9 Aug 2003, Phil Howard wrote:

I'm actually getting the mailing list mail, so I don't know what the
deal is. Successful deliveries are coming from 64.117.225.209. But
207.173.200.206 has big problems.

207.173.200.206? We aren't using that server for relaying ... we *are*
using: 207.173.200.143, which does reverse:

%nslookup 207.173.200.143
Server: neptune.hub.org
Address: 64.117.224.130

Name: hosting.commandprompt.com
Address: 207.173.200.143

Joshua, are there multiple IPs on that box that he might be seeing?

#3Phil Howard
phil-pgsql-general@ipal.net
In reply to: The Hermit Hacker (#2)
Re: Continued mail server problems for all PGSQL mailing lists I'm on

On Sat, Aug 09, 2003 at 07:40:24PM -0300, The Hermit Hacker wrote:

| On Sat, 9 Aug 2003, Phil Howard wrote:
|
| > I'm actually getting the mailing list mail, so I don't know what the
| > deal is. Successful deliveries are coming from 64.117.225.209. But
| > 207.173.200.206 has big problems.
|
| 207.173.200.206? We aren't using that server for relaying ... we *are*
| using: 207.173.200.143, which does reverse:
|
| %nslookup 207.173.200.143
| Server: neptune.hub.org
| Address: 64.117.224.130
|
| Name: hosting.commandprompt.com
| Address: 207.173.200.143
|
| Joshua, are there multiple IPs on that box that he might be seeing?

Then is 207.173.200.206 a spammer running Sendmail and faking these mailing
lists?

--
-----------------------------------------------------------------------------
| Phil Howard KA9WGN | http://linuxhomepage.com/ http://ham.org/ |
| (first name) at ipal.net | http://phil.ipal.org/ http://ka9wgn.ham.org/ |
-----------------------------------------------------------------------------

#4HansH
hartenhans@op.het.net
In reply to: Phil Howard (#1)
Re: Continued mail server problems for all PGSQL mailing lists I'm on

In response to "Phil Howard":

207.173.200.206? We aren't using that server for relaying ... we
*are* using: 207.173.200.143, which does reverse:
%nslookup 207.173.200.143
Server: neptune.hub.org
Address: 64.117.224.130
Name: hosting.commandprompt.com
Address: 207.173.200.143
Joshua, are there multiple IPs on that box that he might be seeing?

Then is 207.173.200.206 a spammer running Sendmail and faking these
mailing lists?

FWIIW server response through Telnet:
220 localhost.localdomain ESMTP Sendmail 8.11.6/8.11.6; Sat, 9 Aug 2003
16:00:03 -0700

HansH

#5The Hermit Hacker
scrappy@hub.org
In reply to: Phil Howard (#3)
Re: Continued mail server problems for all PGSQL mailing

On Sat, 9 Aug 2003, Phil Howard wrote:

| %nslookup 207.173.200.143
| Server: neptune.hub.org
| Address: 64.117.224.130
|
| Name: hosting.commandprompt.com
| Address: 207.173.200.143
|
| Joshua, are there multiple IPs on that box that he might be seeing?

Then is 207.173.200.206 a spammer running Sendmail and faking these mailing
lists?

My first guess is that the machine we are using @ CommandPrompt as a relay
point has multiple IPs on it, and the outbound IP is being seen as 206,
while we're sending i through 143 ...

#6Robby Russell
rrussell@commandprompt.com
In reply to: Phil Howard (#3)
Re: Continued mail server problems for all PGSQL mailing

Phil Howard wrote:

On Sat, Aug 09, 2003 at 07:40:24PM -0300, The Hermit Hacker wrote:

| On Sat, 9 Aug 2003, Phil Howard wrote:
|
| > I'm actually getting the mailing list mail, so I don't know what the
| > deal is. Successful deliveries are coming from 64.117.225.209. But
| > 207.173.200.206 has big problems.
|
| 207.173.200.206? We aren't using that server for relaying ... we *are*
| using: 207.173.200.143, which does reverse:
|
| %nslookup 207.173.200.143
| Server: neptune.hub.org
| Address: 64.117.224.130
|
| Name: hosting.commandprompt.com
| Address: 207.173.200.143
|
| Joshua, are there multiple IPs on that box that he might be seeing?

Then is 207.173.200.206 a spammer running Sendmail and faking these mailing
lists?

206 is another one of our machines, which I am requesting they fix the
reverse mapping. Different machine, different purpose.

Not sure why/how you shoud be getting any issues from that machine on
this list.

Can you forward me the email that was sent to you from said ip?

Thanks,

Robby

--
Robby Russell, | Sr. Administrator / Lead Programmer
Command Prompt, Inc. | http://www.commandprompt.com
rrussell@commandprompt.com | Telephone: (503) 222.2783

#7Martijn van Oosterhout
kleptog@svana.org
In reply to: The Hermit Hacker (#5)
Re: Continued mail server problems for all PGSQL mailing

On Sat, Aug 09, 2003 at 08:05:58PM -0300, The Hermit Hacker wrote:

On Sat, 9 Aug 2003, Phil Howard wrote:

Then is 207.173.200.206 a spammer running Sendmail and faking these mailing
lists?

My first guess is that the machine we are using @ CommandPrompt as a relay
point has multiple IPs on it, and the outbound IP is being seen as 206,
while we're sending i through 143 ...

FWIW, the headers of your email contain the following:

#8Joshua D. Drake
jd@commandprompt.com
In reply to: The Hermit Hacker (#2)
Re: Continued mail server problems for all PGSQL mailing

207.173.200.206? We aren't using that server for relaying ... we *are*
using: 207.173.200.143, which does reverse:

%nslookup 207.173.200.143
Server: neptune.hub.org
Address: 64.117.224.130

Name: hosting.commandprompt.com
Address: 207.173.200.143

Joshua, are there multiple IPs on that box that he might be seeing?

Yes it is because it is behind a firewall. See my other response. For
some reason our reverse DNS
request is being delayed. I actually made the request the same day you
made yours (usually it is same day).
I will double check with them on Monday.