Karsten Bräckelmann wrote:
On Thu, 2009-05-14 at 12:42 -0400, Bowie Bailey wrote:
I have the whitelist_bounce_relays options set for vbounce and the rules
are hitting on bounce messages, but the whitelists don't seem to be working.
In my local.cf, I have:
whitelist_bounce_relays bnofimage1.buc.com
But, an email with this header comes through:
Do you really mean *header* of the message here?
Received: from bnofimage1.buc.com (bnofimage1.buc.com [::ffff:172.16.17.11])
by bnofmail.buc.com with esmtp; Thu, 14 May 2009 12:22:03 -0400
id 0013C1A3.4A0C452B.0000728E
and it gets hit with BOUNCE_MESSAGE and ANY_BOUNCE_MESSAGE.
What am I missing here?
The definition of a bounce? ;)
The VBounce plugin does *not* check the messages headers. Instead, it
has a look at the plain text body and any message/* MIME attachments.
If it finds your own, whitelisted SMTP relay in there, it is not a
backscatter bounce. The original message passed through your servers.
If, however, your relays are not in there, the original, bounced message
is a forgery, not sent via your relays.
Looking at the received messages actual headers will always show your
SMTP servers -- your MX, the inbound one. Which often is the same as the
outbound one, unless you got a dedicated server.
Ok. There may be bit of confusion regarding what VBounce is looking
for, but the problem remains. *All* bounces, regardless of the source
receive a hit from BOUNCE_MESSAGE.
This is from the *body* of one of the bounce emails:
Received: from bucmail.buc.com ([172.16.17.38])
by bnofimage1.buc.com (SAVSMTP 3.1.0.29) with SMTP id M2009051412220217145
for <testb...@kljsdafjlks.com>; Thu, 14 May 2009 12:22:02 -0400
Received: from [172.16.3.237] ([::ffff:172.16.3.237])
by bucmail.buc.com with esmtp; Thu, 14 May 2009 12:22:01 -0400
id 000F008D.4A0C4529.000071B4
bucmail.buc.com and bnofimage1.buc.com are *both* whitelisted relays,
but it was still tagged.
Can someone explain exactly where vbounce expects to find the
whitelisted relays?
--
Bowie
