Re: Hostkarma whitelist needs something..

[Jari Fredriksson]

15.10.2009 4:33, Karsten Bräckelmann kirjoitti:

On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote:

-1.0 RCVD_IN_HOSTKARMA_W    RBL: HostKarma: relay in white list (first pass)
                             [212.16.98.53 listed in 
hostkarma.junkemailfilter.com]

$ host 212.16.98.53
53.98.16.212.in-addr.arpa domain name pointer jatkuu.iki.fi.

212.16.98.53 IS trusted! I have this

internal_networks 10.0.0.0/8
trusted_networks 10.0.0.0/8
trusted_networks 212.16.98.0/24 212.16.100.0/24 62.142.0.0/16 195.197.172.98
trusted_networks 195.74.0.0/16 213.192.189.2/24 217.30.188.0/24 65.54.0.0/16
trusted_networks 83.145.211.136 217.30.180.104
# Gmail follows

trusted_networks 213.157.94.92

Am I wrong or am I wrong in my settings?

trusted_networks 64.233.183.0/24 209.85.199.0/24 72.14.247.27/24 64.233.163.27

   4.0 BOTNET                 Relay might be a spambot or virusbot
[botnet0.8,ip=187.10.243.78,rdns=187-10-243-78.dsl.telesp.net.br,maildomain=resdat.com,baddns,client,ipinhostname,clientwords]

   0.1 RDNS_NONE              Delivered to trusted network by a host with no 
rDNS

Any chance your internal and trusted networks are incorrect? Any chance
your Hostkarma WHITE is checking the wrong IPs?

Hostkarma is supposed to check the lastexternal only. Given the above,
something is *really* fishy here.

Indeed.

--
http://www.iki.fi/jarif/

You love your home and want it to be beautiful.

pgphZkiI2l6fS.pgp
Description: PGP signature