Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 6 Mar 2017 17:20:23 +0000
From:      Matthew Seaman <matthew@FreeBSD.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: sendmail check_rcpt reports in daily run output
Message-ID:  <f8bf6b71-e10d-c475-9d2f-3beff98923a3@FreeBSD.org>
In-Reply-To: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org>
References:  <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD
Content-Type: multipart/mixed; boundary="RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN";
 protected-headers="v1"
From: Matthew Seaman <matthew@FreeBSD.org>
To: freebsd-questions@freebsd.org
Message-ID: <f8bf6b71-e10d-c475-9d2f-3beff98923a3@FreeBSD.org>
Subject: Re: sendmail check_rcpt reports in daily run output
References: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org>
In-Reply-To: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org>

--RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 2017/03/06 17:00, Gary Aitken wrote:
> The daily run output now shows numerous rejected mail hosts for check_r=
cpt=20
> addresses at the domain on which it is running, e.g.:
> Checking for rejected mail hosts:
>    2 550 check_rcpt some-valid-user@dreamchaser.org zen.spamhaus.org
>    2 550 check_rcpt some-valid-alias@dreamchaser.org zen.spamhaus.org
>    1 553 check_rcpt 6090603@dreamchaser.org exist
>=20
> The domain in the message, (the destination) is clean at spamhaus.org.
> Mail is being delivered in general.

> Some mail was rejected via spamhaus.org due to the originating domain,
> but that's not the issue here -- the domain indicated is the destinatio=
n.
> Why would I get messages indicating a rejection from spamhaus for a
> domain it does not consider a problem?

The output in the daily e-mail comes from scanning /var/log/maillog for
log lines matching a particular pattern.  The original log lines contain
a lot more detail about why a particular message was rejected, and
should be what you look at first when you get suspicious lines like this
in your daily mails.

	Cheers,

	Matthew



--RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN--

--6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org
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=Gdvf
-----END PGP SIGNATURE-----

--6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?f8bf6b71-e10d-c475-9d2f-3beff98923a3>