Re: [cobalt-users] email may be forged ? what gives?

[Larry Smith <lesmith@xxxxxxxxx>]

On Tuesday 16 September 2003 08:47, Ted wrote:
> Sep 16 09:36:48 dserv1 in.qpopper[32361]: (v?) POP login by user "user101"
> at (cdm-6-15-10.rsvl.cox-internet.com) 66.233.15.10 [pop_pass.c:1023]
>
>
> Sep 16 09:37:37 dserv1 sendmail[32373]: JAA32373: ruleset=check_rcpt,
> arg1=<test101@xxxxxxxxxxx>, relay=cdm-66-15-10.rsvl.cox-internet.com
> [66.233.15.10] (may be forged), reject=550 <test101@xxxxxxxxxxx>...
> Relaying denied
>
> Sep 16 09:37:37 dserv1 sendmail[32373]: JAA32373: ruleset=check_rcpt,
> arg1=<ted@xxxxxxxxxxxxxxxxxxxx>, relay=cdm-66-15-10.rsvl.cox-internet.com
> [66.233.15.10] (may be forged), reject=550 <ted@xxxxxxxxxxxxxxxxxxxx>...
> Relaying denied
>
> Sep 16 09:37:40 dserv1 sendmail[32373]: JAA32373:
> from=<test101@xxxxxxxxxxxxxxxxx>, size=0, class=0, pri=0, nrcpts=0,
> proto=ESMTP, relay=cdm-66-15-10.rsvl.cox-internet.com [66.233.15.10] (may
> be forged)
>
> I have this client who all of a sudden can not send mail and gets this
> relay not allowed error. Was working for over a year. To temp fix I added
> the IP into the relay allow list on the server. The server is an old Cobalt
> RAQ2.
>

The error is because DNS is not working in "both" directions.  That is what 
the "may be forged" message is telling you:

beowulf:~ # host 66.233.15.10
10.15.233.66.in-addr.arpa domain name pointer 
cdm-66-15-10.rsvl.cox-internet.com.
beowulf:~ # host cdm-66-15-10.rsvl.cox-internet.com
Host cdm-66-15-10.rsvl.cox-internet.com not found: 3(NXDOMAIN)

The IP resolves to the name, but the name does not resolve back to the IP....

-- 
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx