Date:  Fri, 6 Jun 2008 04:57:51 -0700 (PDT)
From:  Dan Kriwitsky <webhosting (at mark) yahoo.com>
Subject:  [coba-e:13176] Re: Another Strange Sendmail Error
To:  coba-e (at mark) bluequartz.org
Message-Id:  <170727.10575.qm (at mark) web65613.mail.ac4.yahoo.com>
In-Reply-To:  <01ba01c8c780$e52ea5c0$0569a8c0@WORK1>
X-Mail-Count: 13176


--- Jim Scott <jscott (at mark) infoconex.com> wrote:

> Also just another shot in the dark guess.
> 
> DNS is timing out when doing a reverse DNS lookup on the IP. So it logs
> the 
> HELO/EHLO message that the remote server sent and writes (may be forged)
> ?
> 
> So those that show that message maybe it indicates your DNS timed out 
> looking up the IP to name so it was never able to match against your DNS 
> since it had no DNS to match against.
> 
>
> > Return-Path: <rebecka.davie (at mark) mayr-glatzl.at>
> > Received: from 63-138-182-110.customer.static.ip.paetec.net
> > (63-138-182-110.customer.static.ip.paetec.net [63.138.182.110] (may be
> > forged))
> > by [my server] (8.13.1/8.13.1) with ESMTP id m55EcXDE022327
> > for <me (at mark) example.com>; Thu, 5 Jun 2008 09:38:37 -0500
>

My server wrote in 63-138-182-110.customer.static.ip.paetec.net which is
what the IP resolves to. The one outside the parentheses is what they HELO
as. If the server couldn't resolve it, only the IP would be in the
parentheses.

-- 
Dan Kriwitsky