On May 16, 2011, at 10:47 AM, /dev/rob0 wrote:

> On Mon, May 16, 2011 at 10:29:10AM -0400, jason hirsh wrote:
>> On May 16, 2011, at 9:51 AM, Wietse Venema wrote:
>>> jason hirsh:
>>>> 08:40:31.036997 IP mail-iy0-f182.google.com.51101 >  
>>>> tuna.theoceanwindow-bv.com.smtp: Flags [S], seq 850119283, win 5720,  
>>>> options [mss 1430,sackOK,TS val 2972295960 ecr 0,nop,wscale 6], length 0
>>> 
>>> So, you are receiving connection attempts from a Google system
>>> mail-iy0-f182.google.com. This has IP address 209.85.210.182.
>>> 
>>> I also notice that tuna.theoceanwindow-bv.com has an IP address
>>> of 209.160.65.133.
>>> 
>>> What is the output of
>>> 
>>>     ifconfig -a | grep 209.160
>> 
>> inet 209.160.65.133 netmask 0xfffff800 broadcast 209.160.71.255
>> 
>> (this is the IP handling mail services)
>>      
>> inet 209.160.68.112 netmask 0xff000000 broadcast 209.255.255.255
>> 
>> 
>>> 
>>> If the netmask is mis-configured (say, 0xff000000) then that explains
>>> why we see no responses to connection attempts from 209.85.210.182
>>> (and other 209.* IP addresses).
> 
> Wietse's amazing crystal ball strikes again! :)
> 
>>> The reason is that your machine is sending out ARP requests to the
>>> local subnet for 209.85.210.182. Of course it gets no response,
>>> and therefore it never replies to connection attempts from that IP
>>> address.
>>> 
>>> FYI this means that no-one in 209.* would be able to connect to
>>> your web server as well.
>> 
>> 
>> I am more then a little confused in that I have in fact received 
>> mail from that google server
>> 
>> an example from message header is
>> 
>> "Received: from mail-gw0-f54.google.com (mail-gw0-f54.google.com 
>> [74.125.83.54]) by tuna.theoceanwindow-bv.com (Postfix) with ESMTP 
> 
> mail-iy0-f182.google.com[209.85.210.182] is not the same as 
> mail-gw0-f54.google.com[74.125.83.54]

staring at my screen too long
> 
>> id 11AB65C23 for <ja...@kasdivi.com>; Sat, 14 May 2011 22:37:41 
>> -0400 (EDT)"
> -- 
>    Offlist mail to this address is discarded unless
>    "/dev/rob0" or "not-spam" is in Subject: header

Reply via email to