Sahil Tandon a écrit :
> On Thu, 29 Jan 2009, Jim Wright wrote:
>
>> On Jan 29, 2009, at 4:54 PM, Magnus Bäck wrote:
>>
>>> You can easily find the relevant log entries by grepping your maillog
>>> for the queue id, which is found in the first Received: header added by
>>> your system. In this case look at this header:
>>>
>>> Received: from TRXOMOPC (unknown [77.81.179.110]) by
>>> mail.russellhospital.org (Postfix) with ESMTP id A5D9154C3A7; Thu, 29
>>> Jan 2009 14:32:44 -0600 (CST)
>>>
>>> Grep your log for A5D9154C3A7.
>> Which brings us back to one of my favorite Postfix options:
>> reject_unknown_hostname
>
> Which, in Postfix 2.3+, is reject_unknown_helo_hostname, and quite prone to
> false positives. Use with caution on a production server.
>
and in this particular case,
reject_non_fqdn_helo_hostname
would have rejected the message, and is safer.
At this time, the IP is listed in zen.spamhaus.org (and also in
bl.spamcop.net). not sure it was listed at the time the message was
received.
