Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 5 Feb 2008 09:17:31 -0600 (CST)
From:      Mark Tinguely <tinguely@casselton.net>
To:        bc979@lafn.org, on@cs.ait.ac.th
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Problem with makemap and hash tables
Message-ID:  <200802051517.m15FHVpA088692@casselton.net>
In-Reply-To: <200802050323.m153NnOG004527@banyan.cs.ait.ac.th>

next in thread | previous in thread | raw e-mail | index | archive | help

I got that error when there was a duplicate entry.

I broke down and am now restricting emails to mailers that have a valid
forward and reverse DNS entries. Most real mailers have properly configured
DNS, but I also added a permission for those that have a DNS entry that
comes back as possibly forged.

the file /etc/mail/ForgedIP are the hosts that I will bypass the new
filter. Added to sendmail.cf:

F{ForgedIP} /etc/mail/ForgedIP

(and in the relay area)

SLocal_check_relay
R$+ $| $={ForgedIP}$*	$@ $1 $| $2
R$*$={ForgedNames} $| $*	$@ $1 $| $2
R$*			$: < $&{client_resolve} >
R<TEMP>			$#error $@ 4.7.1 $: "450 Access denied. Cannot resolve PTR record for " $&{client_addr}
R<FORGED>		$#error $@ 4.7.1 $: "550 Access denied. IP name possibly forged " $&{client_name}
R<FAIL>			$#error $@ 4.7.1 $: "550 Access denied. IP name lookup failed " $&{client_name}

Scheck_relay



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200802051517.m15FHVpA088692>