On Mon, May 16, 2011 at 10:29:10AM -0400, jason hirsh wrote:
> On May 16, 2011, at 9:51 AM, Wietse Venema wrote:
> > jason hirsh:
> >> 08:40:31.036997 IP mail-iy0-f182.google.com.51101 >
> >> tuna.theoceanwindow-bv.com.smtp: Flags [S], seq 850119283, win 5720,
> >> options [mss 1430,sackOK,TS val 2972295960 ecr 0,nop,wscale 6], length 0
> >
> > So, you are receiving connection attempts from a Google system
> > mail-iy0-f182.google.com. This has IP address 209.85.210.182.
> >
> > I also notice that tuna.theoceanwindow-bv.com has an IP address
> > of 209.160.65.133.
> >
> > What is the output of
> >
> > ifconfig -a | grep 209.160
>
> inet 209.160.65.133 netmask 0xfffff800 broadcast 209.160.71.255
>
> (this is the IP handling mail services)
>
> inet 209.160.68.112 netmask 0xff000000 broadcast 209.255.255.255
>
>
> >
> > If the netmask is mis-configured (say, 0xff000000) then that explains
> > why we see no responses to connection attempts from 209.85.210.182
> > (and other 209.* IP addresses).
Wietse's amazing crystal ball strikes again! :)
> > The reason is that your machine is sending out ARP requests to the
> > local subnet for 209.85.210.182. Of course it gets no response,
> > and therefore it never replies to connection attempts from that IP
> > address.
> >
> > FYI this means that no-one in 209.* would be able to connect to
> > your web server as well.
>
>
> I am more then a little confused in that I have in fact received
> mail from that google server
>
> an example from message header is
>
> "Received: from mail-gw0-f54.google.com (mail-gw0-f54.google.com
> [74.125.83.54]) by tuna.theoceanwindow-bv.com (Postfix) with ESMTP
mail-iy0-f182.google.com[209.85.210.182] is not the same as
mail-gw0-f54.google.com[74.125.83.54]
> id 11AB65C23 for <ja...@kasdivi.com>; Sat, 14 May 2011 22:37:41
> -0400 (EDT)"
--
Offlist mail to this address is discarded unless
"/dev/rob0" or "not-spam" is in Subject: header
