From owner-freebsd-questions@freebsd.org Mon Mar 6 17:20:28 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E9DE5CFBB85 for ; Mon, 6 Mar 2017 17:20:28 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.117.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 79AEB122D for ; Mon, 6 Mar 2017 17:20:28 +0000 (UTC) (envelope-from matthew@FreeBSD.org) Received: from zero-gravitas.local (unknown [192.168.100.8]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: m.seaman@infracaninophile.co.uk) by smtp.infracaninophile.co.uk (Postfix) with ESMTPSA id CEEA9EF4B for ; Mon, 6 Mar 2017 17:20:23 +0000 (UTC) Authentication-Results: smtp.infracaninophile.co.uk; dmarc=none header.from=FreeBSD.org Authentication-Results: smtp.infracaninophile.co.uk/CEEA9EF4B; dkim=none; dkim-atps=neutral Subject: Re: sendmail check_rcpt reports in daily run output To: freebsd-questions@freebsd.org References: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org> From: Matthew Seaman Message-ID: Date: Mon, 6 Mar 2017 17:20:23 +0000 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:45.0) Gecko/20100101 Thunderbird/45.7.1 MIME-Version: 1.0 In-Reply-To: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD" X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham autolearn_force=no version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on smtp.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Mar 2017 17:20:29 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD Content-Type: multipart/mixed; boundary="RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN"; protected-headers="v1" From: Matthew Seaman To: freebsd-questions@freebsd.org Message-ID: Subject: Re: sendmail check_rcpt reports in daily run output References: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org> In-Reply-To: <456dd3eb-840e-8be4-7c29-8996ad449c36@dreamchaser.org> --RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2017/03/06 17:00, Gary Aitken wrote: > The daily run output now shows numerous rejected mail hosts for check_r= cpt=20 > addresses at the domain on which it is running, e.g.: > Checking for rejected mail hosts: > 2 550 check_rcpt some-valid-user@dreamchaser.org zen.spamhaus.org > 2 550 check_rcpt some-valid-alias@dreamchaser.org zen.spamhaus.org > 1 553 check_rcpt 6090603@dreamchaser.org exist >=20 > The domain in the message, (the destination) is clean at spamhaus.org. > Mail is being delivered in general. > Some mail was rejected via spamhaus.org due to the originating domain, > but that's not the issue here -- the domain indicated is the destinatio= n. > Why would I get messages indicating a rejection from spamhaus for a > domain it does not consider a problem? The output in the daily e-mail comes from scanning /var/log/maillog for log lines matching a particular pattern. The original log lines contain a lot more detail about why a particular message was rejected, and should be what you look at first when you get suspicious lines like this in your daily mails. Cheers, Matthew --RnMuoCtA6V8U1RskPPT0vCw1XaK8x5ibN-- --6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQJ8BAEBCgBmBQJYvZpXXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxOUYxNTRFQ0JGMTEyRTUwNTQ0RTNGMzAw MDUxM0YxMEUwQTlFNEU3AAoJEABRPxDgqeTnOfkP/1cai5zH7kDFT8cfoYIBDFTE iPuHY1ejfSaoJ2IO8sfSlBV9TDM6b9dzWl3NwsPfUXVlfUJ+iaw0X4sVEPAMTUmQ /gB9wzrEUuPjpuucp+DdT+OVlx1wATZ/5DXdE5l9G0l7WbFVvgIjE9TK7H4JO54n UFQoQRLSS9avnTCh6o686qg+WF2WHsw8BuYa5lghV8BogJE6berTfcuvOyrxReI+ OjuirLCR/Xb3IRidytxQPFEBFheuj9AkXaP04R2GQc/smjXNTNVKAgIKWlHkQbMf 4WRCbyJ23MoBPNE2XV5IELgxT669BPGxTeEHvDolNqf+NAFR+UKxBA1QBG/I1T3H L6/lOpU92D504qCTmGcH9cgVOxoTn3GwPI1LQx+3CfwbbBEJs6wcfMn7iZOd+RSd Kj1HdXIlxVqCWTBzg0tSTaRd46Z9cuhJpeHH2fWp1SvKVFQ5lf0D40ITezj1wO8S rWBS0RiBRmeiAqUqzOy6ZDQcVYmqE0t31yu6jpI9E9ikFpEY4GEBCafLv4mLsVRh ksYsgEuO5bxt4PYeaylsJT0lB4H/0Mu30sxxoza7DeQkZPBj1bxH23aVuvPTn4YO scs0kSVMsHbcvI08HNzNRyP7X6hVjZWBsEQSuDt/fCez9OYTludA05RLF7VY2dSH 5NM6y3kghsXdt8ROGQBJ =Gdvf -----END PGP SIGNATURE----- --6vknLj9fhaIMhG36uiGNgwbMKSteF4JBD--