Howdie; I'm starting to see plenty of these and they are new to us:
zgrep "address not listed" /var/log/mail.info Sep 3 05:26:59 ....: warning: 222.252.239.56: address not listed for hostname localhost dig -x 222.252.239.56 ... ;; QUESTION SECTION: ;56.239.252.222.in-addr.arpa. IN PTR ;; ANSWER SECTION: 56.239.252.222.in-addr.arpa. 83651 IN PTR localhost. ... Taking to one side the various RBL's which are catching these, and not going the whole 'PTR must match' route - would it be practical to craft a 10 point rule based on PTR = localhost? Is it even possible to build a rule based upon DNS returns? Forgive the stupidity of the question, but I'm not sure how to, or even if it can be implemented? -- ----------------------------------------------------------- C Werclick .Lot Technical incompetent Loyal Order Of The Teapot. This e-mail and its attachments is intended only to be used as an e-mail and an attachment. Any use of it for other purposes other than as an e-mail and an attachment will not be covered by any warranty that may or may not form part of this e-mail and attachment.