[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: RBLs and TXT RRs

On Thu, Nov 06, 2003 at 04:31:57PM -0300, Mariano Absatz wrote:
> I only have a test setup on a production server where I only "log"
> (not reject).

Ok.   The thing is constructed only to use the  state->rblmsg  string
in cases where there is   "test-rcpt-dns-rbl +"  pair in the  _rbl1
ruleset.  Otherwise it is silently ignored.

Indeed the system isn't equipped to LOG the text at all.
In  smtpserver/policytest.c  there are two calls to   rbl_dns_test()
and the second one of those is the one you are interested.

> The portion of smtp-policy.src looks like:
> ======================================================================
> .             relaycustomer - relaytarget - senderokwithdns + = _rbl1
> []/0   relaycustomer - relaytarget - senderokwithdns + = _rbl0
> # log open proxies
> _rbl0   rcpt-dns-rbl    pss.spambusters.org.ar
> _rbl1       # but don't reject
> ======================================================================


> Now, in my smtpserver log, I have:
> Looking up DNS A object:
> (for non-found addresses) and
> Looked up DNS A object: ->
> (for found addresses).
> Now, If I manually do:
> # host -t txt
> descriptive text "This mail was handled by \ 
>     an open relay - please visit \
>     <http://ORDB.org/lookup/?host=>"

Odd..  The code in   smtpserver/mxverify.c: dnsmxlookup()  does
something odd, and strips last character of that...  Ah, I see,
better to err that way, anyway.

> It'd be nice to be able to put the content of this record in a rejection:
> 550 5.7.1 This mail was handled by an open relay - please visit \
>     <http://ORDB.org/lookup/?host=>

It will be (for RCPT TO line) if there is proper attribute pair.

> but the TXT RR is never queried (and thus, nor even logged)...

It is queried, but not logged.
Well, at least until I commit my current edit :-)

> Mariano Absatz
/Matti Aarnio	<mea@nic.funet.fi>
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi