destination host is loopback

[Alex Neuman van der Hans]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Scott Silva wrote:

>Kevin Miller spake the following on 8/26/2005 8:55 AM:
>  
>
>>Joost Waversveld wrote:
>>
>>    
>>
>>>>I'm getting a number of errors everyday in my logs of the sort:
>>>>
>>>>mail.eastrolog.com. config error: mail loops back to me (MX problem?)
>>>>
>>>>sure enough, if I do a DNS lookup for the above host, it resolves to
>>>>127.0.0.1. Is there anything I can do about this? I get about half a
>>>>dozen different hosts like this per relay per day.
>>>>
>>>>        
>>>>
>>>----- Einde bericht van gmatt at NERC.AC.UK -----
>>>
>>>Are you using mailertable?? Then, be sure to put the
>>>hostnames/ipaddressess between [ and ] brackets... Otherwise sendmail
>>>will perform another MX lookup through DNS and will give you this
>>>error... 
>>>
>>>For Example:
>>>
>>>[root at bb ~]# cat /etc/mail/mailertable
>>>domain.tld         esmtp:[192.168.12.251]
>>>domain2.tld        esmtp:[mail.domain2.tld]
>>>etc...
>>>      
>>>
>>Not sure that's his problem.  If I'm reading it right, I think that's mail
>>from outside his system - probably NDR replies.
>>
>>I had  a similar situation a couple years ago.  The spammer had
>>intentionally set their reply-to address to a domain that *they* resolved to
>>127.0.0.1 so that they never had to bother with bounce messages and
>>complaints.  Sleaze bags.
>>
>>My present solution is to reject any connections from that domain in
>>sendmail's access table.  At the time I wasn't running sendmail, and the
>>stupid program I was using just kept sending NRDs to itself, which weren't
>>accepted so it sent an NDR for the NDR, etc.  Didn't take long to fill up
>>the disk!  Thankfully sendmail is a bit smarter about it!
>>
>>HTH...
>>
>>...Kevin
>>    
>>
>This looks to be a horoscope site, so the sleasebag spammer comment
>above probably applies.
>They might have thought resolving to the loopback address might fool
>SOME scanning systems.
>
>  
>
isn't there some sort of milter that can do this?

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!