1. Forum
  2. Usenet
  3. COMP.MAIL.SENDMAIL

  • Re: Access DB and CNAMEs

    From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Aristidis G. Fesarlis on Thu Nov 25 05:09:18 2021
    Aristidis G. Fesarlis wrote:

    Therefore my question is if there is a way to configure Sendmail to
    actually follow the DNS and show the actual match. If someone maintains

    You would have to change the rules which do the matching to include
    the key which triggered the match.

    Maybe you can write a patch and make it available as an optional
    feature?

    --
    Note: please read the netiquette before posting. I will almost never
    reply to top-postings which include a full copy of the previous
    article(s) at the end because it's annoying, shows that the poster
    is too lazy to trim his article, and it's wasting the time of all readers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Aristidis G. Fesarlis@21:1/5 to All on Thu Nov 25 11:40:24 2021
    Hello,
    I maintain an access DB and recently I've had issues with rejected
    incoming messages. After examining the issue, I have pinpointed the
    problem. It was caused by a hostname included in the database which is
    actually a CNAME to another domain. In particular:

    em9713.email.wetransfer.com is a CNAME to u922094.wl095.sengrid.net

    In my case domain sendgrid.net is blacklisted. However the log does not
    clarify this:


    Nov 25 09:27:30 srv02 sendmail[28382]: 1AP7RRup028382: ruleset=check_mail, arg1=<bounces+922094-f85e-user=domain.com@em9713.email.wetransfer.com>, relay=o1.email.wetransfer.com [192.254.117.71], reject=550 5.7.1 <bounces+922094-f85e-user=domain.com@
    em9713.email.wetransfer.com>... Access denied

    Therefore my question is if there is a way to configure Sendmail to
    actually follow the DNS and show the actual match. If someone maintains
    a large blacklist like me it is quite difficult to find the problem quickly.

    Thank you.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Aristidis G. Fesarlis@21:1/5 to All on Thu Nov 25 18:16:35 2021
    Maybe you can write a patch and make it available as an optional
    feature?

    I would be happy to but I am not that familiar with programming.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Aristidis G. Fesarlis on Mon Nov 29 00:56:39 2021
    Aristidis G. Fesarlis wrote:

    Therefore my question is if there is a way to configure Sendmail to
    actually follow the DNS and show the actual match. If someone maintains

    Try using an explicit error message and include %0 in it.
    Argument "%0" indicates the database key.

    From:cyberspammer.com ERROR:"550 no mail %0"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Aristidis G. Fesarlis@21:1/5 to All on Tue Nov 30 13:08:29 2021
    Can I also substitute plain REJECT entries with this? I mean, entries
    which block IPs/domains and not specific senders.

    In case I am not being clear enough, I actually mean entries that do not
    start with "From:" keyword.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Aristidis G. Fesarlis@21:1/5 to All on Tue Nov 30 13:06:41 2021
    Try using an explicit error message and include %0 in it.
    Argument "%0" indicates the database key.

    From:cyberspammer.com ERROR:"550 no mail %0"

    Thank you.
    Can I also substitute plain REJECT entries with this? I mean, entries
    which block IPs/domains and not specific senders.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Aristidis G. Fesarlis on Tue Nov 30 11:22:28 2021
    Aristidis G. Fesarlis wrote:
    Can I also substitute plain REJECT entries with this? I mean, entries
    which block IPs/domains and not specific senders.

    In case I am not being clear enough, I actually mean entries that do not start with "From:" keyword.

    Sure, see cf/README for other tags.

    Let us know whether/how it works for you.

    --
    Note: please read the netiquette before posting. I will almost never
    reply to top-postings which include a full copy of the previous
    article(s) at the end because it's annoying, shows that the poster
    is too lazy to trim his article, and it's wasting the time of all readers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)