Dan how about turning your logging level of sendmail up and seeing if that
points to why it is being accepted.
You can add this to your sendmail.mc file and run make
define(`confLOG_Level', `98')
or
change LogLevel in sendmail.cf
98 being the highest log level you can set. Of course you will want to only
do this for a small period of time depending on the amount of traffic you
get but maybe the more verbose logs will disclose the issue.
----- Original Message -----
From: "Dan Kriwitsky" <webhosting (at mark) yahoo.com>
To: <coba-e (at mark) bluequartz.org>
Sent: Thursday, June 05, 2008 8:24 AM
Subject: [coba-e:13168] Re: Another Strange Sendmail Error
> Sorry to keep replying to my own posts, but:
>
> --- Dan Kriwitsky <webhosting (at mark) yahoo.com> wrote:
>
>> Everyone that is getting past the access map has (may be forged)) in the
>> header. I wonder if somehow whatever function in Sendmail inserts that,
>> is
>> interfering with it being blocked? Or, the fact that sm-client wasn't
>> running? But, lots of other mail was being blocked by access while
>> sm-client wasn't running.
>>
>
> Well, it's not sm-client. That was running just fine now when this spam
> that should have been rejected by access was allowed in. Again, the (may
> be
> forged) line is present.
>
>> /map access customer.static.ip.paetec.net
> map_lookup: access (customer.static.ip.paetec.net) returns REJECT (0)
>
> Return-Path: <rebecka.davie (at mark) mayr-glatzl.at>
> Received: from 63-138-182-110.customer.static.ip.paetec.net
> (63-138-182-110.customer.static.ip.paetec.net [63.138.182.110] (may be
> forged))
> by [my server] (8.13.1/8.13.1) with ESMTP id m55EcXDE022327
> for <me (at mark) example.com>; Thu, 5 Jun 2008 09:38:37 -0500
> Received: from [63.138.182.110] by pmail.utanet.at; Thu, 5 Jun 2008
> 09:38:37 -0500
> Message-ID: <01c8c6ef$edd98c80$6eb68a3f (at mark) rebecka.davie>
> From: "Susanna Burnett" <rebecka.davie (at mark) mayr-glatzl.at>
> To: <me (at mark) example.com>
> Subject: 150 + H = 75
> Date: Thu, 5 Jun 2008 09:38:37 -0500
> MIME-Version: 1.0
> Content-Type: text/plain;
> format=flowed;
> charset="iso-8859-2";
> reply-type=original
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2905
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905
>
>
> --
> Dan Kriwitsky
>
>
>
>
>