On Sat December 9 2006 3:56 pm, Wolfgang S. Rupprecht wrote: > James Wilkinson <fedora@xxxxxxxxxxxxxxxxxx> writes: > > What is the sender e-mail address for the e-mail? What's the > > domain name? > > If it is the logwatch mailing I can tell you exactly what the > OP's problem is. The logwatch authors chose an sender name > that doesn't exist in /etc/password. When Verizon does the > smpt "finger-back" to see if the user-name really exists, it > finds that user "logwatch" doesn't exist on the fedora box. > It then thinks the email is spoofed and junks it. > > I have a similar problem here with logwatch that falls afoul > of my *@wsrcc.com anti-spoofing filters. My filters notice > that the claimed sender "logwatch@xxxxxxxxxxxx" doesn't exist > and trashes the message. I found the simplest fix is to make > the sender be root and have the human-name-string (gecos field > for the old timers) be "Logwatch". > > To do that add this to the file > /etc/logwatch/conf/logwatch.conf: > > MailFrom = root (Logwatch) > > ---- cut here ---- > > -wolfgang > -- > Wolfgang S. Rupprecht > http://www.wsrcc.com/wolfgang/ Listen, all of you who are responding, I'm reading your suggestions avidly, and I thank you for them. I haven't had time to try any of your suggestions, or trouble-shoot further, but I will devote some time to this tonight. It's funny, because my denyhosts mailings suddenly started working, so something I did in the last round has affected something - in this case, I'm using a different mailto address, but, it wasn't working either, before. Here's some of the header stuff from one of the header messages from denyhosts: Return-Path: <nobody@xxxxxxxxxxxxxxxxxxxxx> Delivery-Date: Fri, 08 Dec 2006 13:48:12 -0500 Received-SPF: none (mxus11: 70.109.86.228 is neither permitted nor denied by domain of localhost.localdomain) client-ip=70.109.86.228; envelope-from=nobody@xxxxxxxxxxxxxxxxxxxxx; helo=localhost.localdomain; Received: from [70.109.86.228] (helo=localhost.localdomain) by mx.perfora.net (node=mxus11) with ESMTP (Nemesis), id 0MKqNT-1GsklX3DPq-0000Iw for claudejones@xxxxxxxxxxxxxxxxxxx; Fri, 08 Dec 2006 13:48:12 -0500 Received: from localhost.localdomain (localhost [127.0.0.1]) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id kB8ImBRl021315 for <claudejones@xxxxxxxxxxxxxxxxxxx>; Fri, 8 Dec 2006 13:48:11 -0500 Message-Id: <200612081848.kB8ImBRl021315@xxxxxxxxxxxxxxxxxxxxx> From: DenyHosts <nobody@xxxxxxxxxxxxxxxxxxxxx> To: claudejones@xxxxxxxxxxxxxxxxxxx Subject: DenyHosts Report from $Tehogee Date: Fri, 08 Dec 2006 13:48:11 -0500 Envelope-To: claudejones@xxxxxxxxxxxxxxxxxxx In this case, Verizon is not in the picture, and the user that's sending the msg is a defined user, even though nobody...FWIW -- Claude Jones Brunswick, Md, USA
