> nik600 hotmail wrote: > > I'm experiencing a strange problem with RDNS_NONE. > > > > On the same sender host, sometimes it is marked with RDNS_NONE, and > > sometimes not. > > > > The host has a reverse dns! > > > > Example: > > Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) -> > > OK > > > > Received: from dadosoftware.com (unknown [217.199.13.2]) -> FALSE POSITIVE
well, either your MX does resolve 217.199.13.2 to a name, or it does not. If it sometimes does resolve, sometimes not, it's a problem of DNS. If you have different mailers of which one does not resolve DNS, it's problem of its configuration. SA does not resolve that IP, the MTA must do that. > > But 217.199.13.2 has a reverse dns! > > 2.13.199.217.in-addr.arpa. 11894 IN PTR dns2.dadosoftware.com. It also must point back, but it does: dns2.dadosoftware.com has address 217.199.13.2 > > Who decides the presence of RDNS_NONE ? > > A real dns check or a parsing of the email headers? > > > > And, in case of parse who decides to write dns2.dadosoftware.com > > [217.199.13.2] instead of unknown [217.199.13.2]? it's the MTA who constructs the Received: line. On 06.11.08 05:22, derHummel wrote: > I don't sure will it help or not but I've faced with very similar issue: > > ******** Received: from relay.blablabla.net (unknown [xxx.xxx.xxx.xxx]) > ********** > > host relay.blablabla.net has PTR record: > > host xxx.xxx.xxx.xxx > xxx.xxx.xxx.xxx.in-addr.arpa domain name pointer relay.blablabla.net. > > then I tried: > host relay.blablabla.net > relay.blablabla.net has address yyy.yyy.yyy.yyy > > and: > host yyy.yyy.yyy.yyy > yyy.yyy.yyy.yyy.in-addr.arpa domain name pointer relay.blablabla.net. > > So. I see that the host blablabla has two A records registered in DNS and > two PTR. No. If it has to A records, the "host" would return them both: host relay.blablabla.net relay.blablabla.net has address yyy.yyy.yyy.yyy relay.blablabla.net has address xxx.xxx.xxx.xxx If it does not, then the problem is that xxx.xxx.xxx.xxx has invalid reverse DNS, because the name it points to does NOT resolve back to that IP. -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. (R)etry, (A)bort, (C)ancer
