Меню

Ошибка exim rejected rcpt

Добрый день.
Есть Статический IP;
Прокинутые порты через роутер 25, 110 и 53;
Freebsd 10;
Exim 4.85;
Bind 9;
Купленный доменный адрес.
Днс настроен. Hе из моей сети пингуется по адресу, по IP.
Пытаюсь разобраться с настройкой почтового сервера. Делал по вот этому руководству http://www.info-x.org/freebsd/email/nas … _exim.html. Настраивал все так же как написано, кроме сертификатов, я их просто закоментировал. Письма отправляются, но не принимаются. В логах exima следующее
reject log (/var/log/exim/rejectlog)

Код: Выделить всё

 H=(f145.i.mail.ru) [94.100.178.197] I=[192.168.200.142]:25 F=<вввв@list.ru> rejected RCPT <slade@вввв.su>

mainlog выдает тоже самое
команда exim -bt slade@выафвы.su

Код: Выделить всё

slade@выаsu
  router = virtual_user, transport = dovecot_delivery

exim -bh 192.168.200.142

Код: Выделить всё

>>> host in hosts_connection_nolog? no (option unset)
>>> host in host_lookup? no (option unset)
>>> host in host_reject_connection? no (option unset)
>>> host in sender_unqualified_hosts? no (option unset)
>>> host in recipient_unqualified_hosts? no (option unset)
>>> host in helo_verify_hosts? no (option unset)
>>> host in helo_try_verify_hosts? no (option unset)
>>> host in helo_accept_junk_hosts? no (option unset)
>>> using ACL "acl_check_connect"
>>> processing "warn"
>>> check set acl_c_reverse_address = ${escape:${lookup dnsdb{ptr=$sender_host_address}{$value}}}
>>>                              = gate.ukhtavodokanal.su
>>> warn: condition test succeeded in ACL "acl_check_connect"
>>> processing "accept"
>>> accept: condition test succeeded in ACL "acl_check_connect"
>>> end of ACL "acl_check_connect": ACCEPT
220 gate.ввввв.su ESMTP MTA :)

На почту mail.ru(list.ru) приходит следующее

Код: Выделить всё

Это письмо создано автоматически сервером Mail.Ru, отвечать на него не нужно.

К сожалению, Ваше письмо не может быть доставлено одному или нескольким получателям:

  slade@вв.su
    SMTP error from remote mail server after RCPT TO:<slade@ukhtavodokanal.su>:
    host mail.ukhtavodokanal.su [83.69.16.162]: 550 Administrative prohibition

Рекомендуем Вам проверить корректность указания адресов получателей.

Еще вот что на сервере в базе данных созданы две учетки(почтовых адреса) slade и slade1 и локально из одной учетной записи в другую я тоже не могу отправить.
Подскажите люди добрые!!!! В чем моя ошибка???

Источник

Most probably your server tries to verify the sender’s email address and it finds that there is no such address. It is a good, albeit not foolproof, method to filter out unsolicited email.

In order to verify this, the exim server connects to the remote SMTP server from which the mail originates accordig to the «MAIL FROM» command. If the server can’t be reached, or if it doesn’t know about that particular email address, the delivery is denied.

So, the error message is initially given by the MX server of «e-mydomain.com.br». Your server, when it doscovers that the email is originated from a nonexistent address, denies the delivery.

For this, the exim config contains entries like this:

deny message = Sender verify failed
     !verify = sender

Check your config and if you see something like this, then the cause of the errors is that your server denies mails from addresses which can’t be verified.

In this case, you probably don’t want to change it. Like I said, it is a good thing to check the sender. Real-world senders do have a valid email address, anyway.

Источник

Автор 1eXX, 22 августа 2014, 12:33:29

« назад — далее »

0 Пользователи и 1 гость просматривают эту тему.


1eXX

  • Новичок форума
  • Сообщения: 5
  • Записан

Добрый день, уважаемые спецы.

Помогите кто может разобраться с проблемой.
На debian настроен exim+sa+greylist, с недавних пор возникла проблема — входящая почта не проходит, по логам информации немного (для примера одна строчка из rejectlog, по всем входящим письмам всё тож самое):
2014-08-22 12:09:43 H=mail1.elcable.ru [94.137.228.44] F=<sb36@holdcable.com> temporarily rejected RCPT <ящик@наш_домен>

Подскажите пожалуйста, как более точно определить хотяб направление поиска?
На вас посленяя надежда.

скорее всего у вас стоит проверка на helo, и блокируются спамеры.
с вашей стороны из логов нужен пример о блокировке например яндекс почты.


1eXX

  • Новичок форума
  • Сообщения: 5
  • Записан

попытался отправить письмо с yandex.ru в 13:40

/var/log/exim4/mainlog (в rejectlog таже информация):
————————————————————————————————
2014-08-22 13:40:52 H=forward2h.mail.yandex.net [84.201.187.147] F=<XXXXXX@yandex.ru> temporarily rejected RCPT <ящик@наш-домен.ru>
2014-08-22 13:40:52 SMTP connection from forward2h.mail.yandex.net [84.201.187.147] closed by QUIT
————————————————————————————————
/var/log/exim4/paniclog — пуст
mail.info, mail.log — записей в это время нет
в каталогах /var/spool/exim4/msglog и input — в тамошних файлах нет записей во время передачи письма

Чёрный ящик млин(

показывай настройки exim
и результат команды:

nslookup forward2h.mail.yandex.net


1eXX

  • Новичок форума
  • Сообщения: 5
  • Записан

root@mailserv:/var/spool/exim4/msglog# nslookup forward2h.mail.yandex.net
Server:         192.100.1.1
Address:        192.100.1.1#53

Non-authoritative answer:
Name:   forward2h.mail.yandex.net
Address: 84.201.187.147

конфиг — /var/lib/exim4/config.autogenerated


1eXX

  • Новичок форума
  • Сообщения: 5
  • Записан

Прошло письмо с «@list.ru», каким-то чудом


1eXX

  • Новичок форума
  • Сообщения: 5
  • Записан

Проблема решилась отключением greylista (почему-то вдруг стал пропускать только ту почту, которая была в белом списке).
Спасиб endru за желание помочь.

  • Русскоязычное сообщество Debian GNU/Linux
  • ►
  • ►
    Администрирование
  • ►
    [РЕШЕНО] Exim не пропускает входящую почту — ‘temporarily rejected RCPT’

Источник

  • #1

These days I notice a lot of the following below in the exim mainlog.
A client reported also that they missed some mails and I ask myself if I’m hacked or that this is just a mass spam pointed to my server.
I already blocked the IP’s in the deny file, still see this in the logs. :unsure:

Anyone has an idea what it is and what to do?

2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 remote host address is the local host: websrv01.mydomain.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-19 07:38:01 H=([185.143.223.163]) [185.143.223.160] incomplete transaction (connection lost) from <[email protected]>

  • #2

Hello,

What is the deny file? How did you block the IP?

I already blocked the IP’s in the deny file, still see this in the logs.

from Google search (https://www.google.com/search?q=remote+host+address+is+the+local+host):

remote host address is the local host is an exim error message which indicates that the sender or recipient’s domain has your machine’s hostname/IP, but exim is not configured to accept mail for that domain.

  • #3

What is the deny file? How did you block the IP?

It is blocked via CFS so it is in host.deny file.

remote host address is the local host is an exim error message which indicates that the sender or recipient’s domain has your machine’s hostname/IP, but exim is not configured to accept mail for that domain.

So does it mean that they pointed their IP to my domain? Or how can I understand this?

  • #4

CSF uses /etc/csf/csf.deny

Did you mask the domains in logs lines? It might be the MX records of the domains point to your server but you don’t host them, or whatever else similar.

  • #5

CSF uses /etc/csf/csf.deny

Did you mask the domains in logs lines? It might be the MX records of the domains point to your server but you don’t host them, or whatever else similar.

Yes I masked them, the IP’s in the logs are not mine. So I think this is a kind of attack.

In the mean time after blocking the IP they changed again their IP: 🙃
2020-02-19 08:33:09 H=([185.143.223.163]) [185.143.223.171]

csf: DENY_IP_LIMIT (200), the following IP’s were removed from /etc/csf/csf.deny:
128.68.61.56 # lfd: (sshd) Failed SSH login from 128.68.61.56 (RU/Russian Federation/128-68-61-56.broadband.corbina.ru): 5 in the last 3600 secs — Sat Feb 15 21:12:40 2020
DROP all opt — in !lo out * 128.68.61.56 -> 0.0.0.0/0
LOGDROPOUT all opt — in * out !lo 0.0.0.0/0 -> 128.68.61.56
Adding 185.143.223.171 to csf.deny and iptables DROP…
DROP all opt — in !lo out * 185.143.223.171 -> 0.0.0.0/0
LOGDROPOUT all opt — in * out !lo 0.0.0.0/0 -> 185.143.223.171

Last edited: Feb 19, 2020

  • #6

Constantly I’m under attack by: H=([185.143.223.163]) [185.143.223.166]
I have a client who says now that mails get lost

Now add 185.143.223.0/32 as blocked range and hope it will stop.
Asked hosting provider if they see DDOS issues.

  • #7

Add RU as blocked country in CSF :)

  • #9

This is set in CSF blocking list: 185.143.223.0/32 # block RU range — Fri Feb 21 14:06:10 2020
In the config: CC_DENY = «CN,RU»

Still the traffic isn’t dropped: :unsure:

2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 remote host address is the local host: websrv01.myserver.net (while verifying <[email protected]> from host ([185.143.223.163]) [185.143.223.160])
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] F=<[email protected]> temporarily rejected RCPT <[email protected]>: remote host address is the local host
2020-02-21 21:02:30 H=([185.143.223.163]) [185.143.223.160] incomplete transaction (connection lost) from <[email protected]>

Last edited: Feb 21, 2020

  • #10

Range 185.143.223.0/32 was incorrect subnetted… /24 did the trick, I need to see now if this completely drops all spam so that my server functions normaly again.

  • #11

Cause the subnet is located in NL:

Code: 

inetnum:        185.143.223.0 - 185.143.223.255
netname:        informtech
country:        NL
admin-c:        LD5508-RIPE
tech-c:         LD5508-RIPE

Code: 

# geoiplookup 185.143.223.0
GeoIP Country Edition: NL, Netherlands

so you need to block NL too in this case ;)

  • #12

Location For an IP: 185.143.223.163
P Address: 185.143.223.163
[IP Blacklist Check]
Reverse DNS: ** server can’t find 163.223.143.185.in-addr.arpa: SERVFAIL
Hostname: 185.143.223.163
Continent: Europe (EU)
Country: Russian Federation

IP Location Find In Russian Federation

(RU)
Capital: Moscow
State: Saint Petersburg City
City Location: Saint Petersburg
Postal: 190005
ISP: Power Networking Limited
Organization: Unknown
AS Number: AS57043 Hostkey B.v.

  • #13

Code: 

traceroute to 185.143.223.1 (185.143.223.1), 30 hops max, 60 byte packets
 1  l7.ams4.transip.net (95.170.86.220)  125.002 ms  124.992 ms  124.990 ms
 2  l7.f2.ams4.transip.net (77.72.151.72)  11.713 ms  11.723 ms  11.718 ms
 3  f2.r1.ams0.transip.net (77.72.151.122)  0.278 ms  0.294 ms  0.291 ms
 4  r1-a0.e1.ams0.transip.net (157.97.168.9)  0.387 ms  0.389 ms  0.385 ms
 5  ams-ix.retn.net (80.249.209.216)  1.150 ms  1.155 ms  1.153 ms
 6  ae0-3.rt.srv.dro.nl.retn.net (87.245.232.44)  2.186 ms  1.846 ms  1.814 ms
 7  gw-serverius.retn.net (87.245.246.61)  11.681 ms  11.767 ms  11.948 ms
 8  185.8.179.39 (185.8.179.39)  4.093 ms  3.943 ms *
 9  185.53.163.41 (185.53.163.41)  193.797 ms  193.173 ms  193.092 ms
10  10.20.0.1 (10.20.0.1)  3.109 ms  3.179 ms  3.493 ms
11  185.143.223.1 (185.143.223.1)  3.466 ms  3.615 ms  3.710 ms

and 185.53.163.41 belongs to https://serverius.net/

Code: 

inetnum:        185.53.160.0 - 185.53.163.255
netname:        NL-SERVERIUS-20140411
country:        NL
org:            ORG-SHB2-RIPE
admin-c:        SN1
tech-c:         SN1
status:         ALLOCATED PA

  • #14

I also encounter portscans and systems trying to send spam to my servers.
This also is done from Dutch servers, but owned/rented by Russians.

But…
person: Lenar Davletshin
address: ul. Gorohovaya 48A, pom. 4N, office 20D
address: ul. Gorohovaya 48A, pom. 4N, office 20D
address: Saint Petersburg
address: RUSSIAN FEDERATION
phone: +7 (495) 409-6573
nic-hdl: LD5508-RIPE
mnt-by: ru-informtech-1-mnt
created: 2018-01-19T16:15:06Z
last-modified: 2019-12-11T15:23:38Z
source: RIPE # Filtered

% Information related to ‘185.143.223.0/24AS204718’

route: 185.143.223.0/24
origin: AS204718
descr: infotech.ru.net
mnt-by: ru-informtech-1-mnt
created: 2018-10-15T13:09:21Z
last-modified: 2018-10-15T13:10:21Z
source: RIPE

However, one can always just block an ip range with CSF.

  • #15

I also encounter portscans and systems trying to send spam to my servers.
This also is done from Dutch servers, but owned/rented by Russians.

But…
person: Lenar Davletshin
address: ul. Gorohovaya 48A, pom. 4N, office 20D
address: ul. Gorohovaya 48A, pom. 4N, office 20D
address: Saint Petersburg
address: RUSSIAN FEDERATION
phone: +7 (495) 409-6573
nic-hdl: LD5508-RIPE
mnt-by: ru-informtech-1-mnt
created: 2018-01-19T16:15:06Z
last-modified: 2019-12-11T15:23:38Z
source: RIPE # Filtered

% Information related to ‘185.143.223.0/24AS204718’

route: 185.143.223.0/24
origin: AS204718
descr: infotech.ru.net
mnt-by: ru-informtech-1-mnt
created: 2018-10-15T13:09:21Z
last-modified: 2018-10-15T13:10:21Z
source: RIPE

However, one can always just block an ip range with CSF.

This IP (or few IPs block) just rented by somebody from RU. For example when we rent ip block from Hetzner — they add our contacts to its description.

  • #16

This IP (or few IPs block) just rented by somebody from RU.

That’s exactly what I stated in the 2nd line of my reply and why i wrote «But…». ;)

Источник

If you, like me, get many «temporarily rejected RCPT <mail@example.com>: remote host address is the local host» messages in exim’s /var/log/exim4/mainlog log, then here’s what I found out to be the solution.

  • So you’ve freshly installed exim or got a fresh install with Debian Squeeze?
  • You did not tinker with the config files manually but used dpkg-reconfigure exim4-config so that you were guided through the basic config?
  • You are not running greylistd, although all the other posts you’ve found related to «temporarily rejected RCPT» are related to that? (Note that exim4 has greylisting not built in or installed with it by default! So the error here is not coming from there.)
  • No mail is getting into your server, you are not receiving mail in your inbox.

My solution:
Check your FQDN (fully qualified domain name), the value you filled in during the pkg-reconfigure wizard on the first reconfigure question seems to be wrong!
— So, step number one: use hostname —fqdn to get the actual, real FQDN of your machine. If that doesn’t return what you expected, go and read the next paragraph on how to change your FQDN.
— Step two: After that restart the reconfigure and answer all the questions as before, this time check the fqdn setting.
— Step three: restart exim, for example with /etc/init.d/exim4 restart — and after that mail should work. Other SMTP hosts will retry delivery on previously rejected mail so wait a bit.

In case you need to change your FQDN:
Sometimes a machine isn’t returning the right FQDN hostname. To fix that, open /etc/hosts and fill in your hostname (subdomain) and domain name:

127.0.0.1       .localdomain         localhost
127.0.1.1       mail.example.com          mail

::1             localhost ip6-localhost ip6-loopback
ff02::1         ip6-allnodes
ff02::2         ip6-allrouters
# --- BEGIN PVE ---
192.168.1.1     mail.example.com          mail
# --- END PVE ---

«mail» is the host name / subdomain here. Then open another file, open /etc/hostname and make sure the name of your host is in there. (It’s usually the only text in this file). In our example case here, the word «mail». After that, run

hostname -F /etc/hostname

which is a command that’s normally issued on bootup and we issue it manually here.
Also make sure that wherever you registered your domain (your domain provider), in settings, an MX record has to point at this domain.

Coda

(In a debug session [see below: Coda point 2 for that] I found out that exim reported «451 Temporary local problem — please try later» to calling SMTP servers, so my local config seemed to be the problem, and as the errors also mentioned something with local host name as the root of the problem, I figured it had to do with my FQDN setting.)

Some posts say that this is related to DNS — it is not, not really. I had no hints of failed DNS lookups in the logs.

Watch what exim is doing, the easy way with:
$ tail /var/log/exim4/mainlog -f

This post here was useful:
use exim -d -bh [a-senders-ip-address] with an IP from the logs where you’ve found the error with exim in a debug session.
Manually enter a MAIL FROM: foo@example.com and exim will tell you how it handles it.
Then manually enter a receiver address with RCPT TO: my-email@example.com, where in my case exim began to point me into the right direction.

Источник

After upgrading Exim to 4.94.1 the logs start showing errors regarding tainted filenames and
e-mails are being temporarily rejected.

If the error is “taint mismatch”, then that’s an exim bug. Otherwise, it is a configuration problem:
https://bugs.exim.org/show_bug.cgi?id=2587

Upgrading notes

Exim version 4.94

Some Transports now refuse to use tainted data in constructing their delivery
location; this WILL BREAK configurations which are not updated accordingly.
In particular: any Transport use of $local_part which has been relying upon
check_local_user far away in the Router to make it safe, should be updated to
replace $local_part with $local_part_data.

After a proper lookup the untainted data is in $local_part_data.
The tainted attribute is sticky, so just copying the content does not remove that attribute.

Tainted not permitted

One of the errors that can be encountered is:

Tainted '/home/mail/user@example.com' (file or directory name for transport_test transport) not permitted

The problem there is that the filename uses tainted data from both $local_part and $domain.
The Exim config might contain something like this that has been working in Exim 4.93.x:

# router
test_router:
  driver = accept
  domains = !+local_domains
  transport = test_transport

# transport
test_transport:
  driver = appendfile
  maildir_format
  directory = /home/mail/${local_part}@${domain}

In order to fix that issue, we would replace router and transport (if that’s the case) for something like this:

# router
test_router:
  driver = accept
  domains = lsearch;/etc/exim/domainlist
  local_parts = lsearch;/etc/exim/domainlist/$domain_data
  transport = test_transport

# transport
test_transport:
  driver = appendfile
  maildir_format
  directory = /home/mail/${local_part_data}@${domain_data}

Tainted filename for search

That’s another possible error that might be encountered after upgrading Exim. This is an example of what can be found in the logs:

Tainted filename for search: '/etc/exim/aliases/mx.example.com' temporarily rejected RCPT <test@example.com>: failed to expand "${if exists{/etc/exim/aliases/$domain}{${lookup{$local_part}lsearch{/etc/exim/aliases/$domain}}}}": NULL

We have a list lookup: “domains = ”

$domain expands to tainted data. If we concatenate $domain to anything, the result will be a tainted string.
In this case: /etc/exim/aliases/$domain is tainted and we may not use that as a filename for a lookup.

We have to use a detainted value rather than $domain in $domain_data, but we need to look at the actual
definition of our local_domains list and work out what the lookup against it will do.

system_aliases:
  driver = redirect
  data = ${if exists{/etc/exim/aliases/$domain}{${lookup{$local_part}lsearch{/etc/exim/aliases/$domain}}}}
  domains = mx.example.com

This is a possible solution using untainted $local_part_data and $domain_data:

system_aliases:
  driver = redirect
  data = $local_part_data
  domains = dsearch,ret=full;//etc/exim/aliases
  local_parts = lsearch;$domain_data
Источник

0 0 голоса
Рейтинг статьи
Подписаться
Уведомить о
guest

0 комментариев
Старые
Новые Популярные
Межтекстовые Отзывы
Посмотреть все комментарии

А вот еще интересные материалы:

  • Яшка сломя голову остановился исправьте ошибки
  • Ясность цели позволяет целеустремленно добиваться намеченного исправьте ошибки
  • Ясность цели позволяет целеустремленно добиваться намеченного где ошибка
  • Ошибка f01 котел бакси
  • Ошибка exe не является приложением win32 что делать

    • ➤