Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Reverse DNS Lookup problem
  FAQ FAQ  Forum Search   Register Register  Login Login

Reverse DNS Lookup problem

 Post Reply Post Reply
Author
Jakob View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jakob Quote  Post ReplyReply Direct Link To This Post Topic: Reverse DNS Lookup problem
    Posted: 18 May 2003 at 8:21am

Hi there

I have recently installed Spamfilter. My mailserver and spamfilter is on the same server behind a NAT-router/firewall.

The problems is the DNS lookup, as it tries to lookup the LAN IP (192.168.1.1) of my router. Therefore any emails will naturally be rejected.

Now if I disable Reverse DNS lookup, spamfilter hardly catches any spammails. It still does MAPS lookup though.

What can I do?

(sorry for my lousy english)

Back to Top
metrotel View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote metrotel Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 9:09am
If you have DNS running on a server behind your firewall you could create a reverse zone for your private dns.
Back to Top
metrotel View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote metrotel Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 9:10am
If no DNS server you could put an entry in your HOSTS file on the server that SpamFiler is running on.
Back to Top
Jakob View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jakob Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 9:38am
I see your point, but is it really necessary to for Spamfilter to lookup DNS in order to work?
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 9:53am

Jakob,

In order to function with the most capabilities, SpamFilter must be able to *see* the real IP of the remote server connecting to your network. It is based on the sender's IP address that SpamFilter can lookup that IP in the blacklists, see what country it's from, check if it has a reverse DNS and more.

If I understood you correctly, during the DNS lookup of an incoming connection SpamFilter is trying to resolve your 192.168.1.1 address. If this is so, it means that your router/firewall is accepting the incoming connection, but it then provides SpamFilter with a translated address of 192.168.1.1, not the original IP. Without that original IP, SpamFilter's functionality is severily crippled...

If I correctly understood your configuration, you will need to configure your firewall so that it provides SpamFilter with the true IP address of the sender.

Roberto Franceschetti
LogSat Software

Back to Top
Jakob View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jakob Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 9:56am

Thanks for your very quick answer.

So the conclusion is that Spamfilter doesn't work with NAT routers?

Back to Top
Jakob View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jakob Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 10:03am

Sorry....forget that last post.

It was only a matter of configuring my firewall correctly. It was configured for masquerading on the private interface.

Thanks for you support :-)

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 18 May 2003 at 10:06am

Glad it worked! I would not have been able to help on the firewall side. The ones I've dealt with allow that to be done in a way or another, but they're all different...

Roberto
LogSat Software

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.077 seconds.