Also just another shot in the dark guess.
DNS is timing out when doing a reverse DNS lookup on the IP. So it logs the
HELO/EHLO message that the remote server sent and writes (may be forged) ?
So those that show that message maybe it indicates your DNS timed out
looking up the IP to name so it was never able to match against your DNS
since it had no DNS to match against.
Jim
----- Original Message -----
From: "Dan Kriwitsky" <webhosting (at mark) yahoo.com>
To: <coba-e (at mark) bluequartz.org>
Sent: Thursday, June 05, 2008 8:24 AM
Subject: [coba-e:13168] Re: Another Strange Sendmail Error
> Sorry to keep replying to my own posts, but:
>
> --- Dan Kriwitsky <webhosting (at mark) yahoo.com> wrote:
>
>> Everyone that is getting past the access map has (may be forged)) in the
>> header. I wonder if somehow whatever function in Sendmail inserts that,
>> is
>> interfering with it being blocked? Or, the fact that sm-client wasn't
>> running? But, lots of other mail was being blocked by access while
>> sm-client wasn't running.
>>
>
> Well, it's not sm-client. That was running just fine now when this spam
> that should have been rejected by access was allowed in. Again, the (may
> be
> forged) line is present.
>
>> /map access customer.static.ip.paetec.net
> map_lookup: access (customer.static.ip.paetec.net) returns REJECT (0)
>
> Return-Path: <rebecka.davie (at mark) mayr-glatzl.at>
> Received: from 63-138-182-110.customer.static.ip.paetec.net
> (63-138-182-110.customer.static.ip.paetec.net [63.138.182.110] (may be
> forged))
> by [my server] (8.13.1/8.13.1) with ESMTP id m55EcXDE022327
> for <me (at mark) example.com>; Thu, 5 Jun 2008 09:38:37 -0500
> Received: from [63.138.182.110] by pmail.utanet.at; Thu, 5 Jun 2008
> 09:38:37 -0500
> Message-ID: <01c8c6ef$edd98c80$6eb68a3f (at mark) rebecka.davie>
> From: "Susanna Burnett" <rebecka.davie (at mark) mayr-glatzl.at>
> To: <me (at mark) example.com>
> Subject: 150 + H = 75
> Date: Thu, 5 Jun 2008 09:38:37 -0500
> MIME-Version: 1.0
> Content-Type: text/plain;
> format=flowed;
> charset="iso-8859-2";
> reply-type=original
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2905
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2905
>
>
> --
> Dan Kriwitsky
>
>
>
>
>