Spam Filter ISP Support - blocking 95% or my mails. Help!!

Print Page | Close Window

blocking 95% or my mails. Help!!

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6438
Printed Date: 02 April 2025 at 12:43am

Topic: blocking 95% or my mails. Help!!

Posted By: morten44
Subject: blocking 95% or my mails. Help!!
Date Posted: 19 March 2008 at 8:32pm

I have just installed smap filter on my windows 2000 webserver.No local DNS Server installed. Using the one provided by IP. My Server is behind a firewall using Ip 192.168.0.1.

All trafic on SMTP ports are forwarded from router to mail server behind router.

I am using Imail 8.22

Can anyone help me with analizing the following in my log. this is the reason why all mail are blocked.It cant find my lan side of the router when doing Reverse DNS lookup.

Can i add this IP somewhere so it bypass reverse lookup for this IP .

It also says "Added 192.168.0.1 to limbo". Can i prevent that?

Does this log tell what the problem is and is there a solution?

Hope to hear from anyone :)

Kind Regards

Morten

Part of logfile:

03-20-08 00:33:05:234 -- (4724) Connection from: 192.168.0.1 - Originating country : N/A
03-20-08 00:33:05:359 -- (4724) Received MAIL FROM: < mailto:oscar@peteroscar.dk - oscar@peteroscar.dk >
03-20-08 00:33:05:375 -- (4724) Received RCPT TO: mailto:oscar@peteroscar.dk - oscar@peteroscar.dk
03-20-08 00:33:05:390 -- (4724) Resolving 192.168.0.1 - Not found
03-20-08 00:33:05:390 -- (4724) - Reverse DNS not found -
03-20-08 00:33:05:406 -- (4724) 192.168.0.1 - Mail from: mailto:oscar@peteroscar.dk - oscar@peteroscar.dk To: mailto:oscar@peteroscar.dk - oscar@peteroscar.dk will be rejected
03-20-08 00:33:05:546 -- (4724) Starting bayesian procedures
03-20-08 00:33:05:578 -- (636) Time to add Msg to Bayes corpus:0
03-20-08 00:33:05:609 -- (4724) Blacklist cache - Added 192.168.0.1 to limbo

Replies:

Posted By: mbrusl
Date Posted: 20 March 2008 at 2:28am

I believe part of the problem you are having is because you do not have a local DNS server running behind your NAT. I've run into the same problem myself until I ran the DNS server on the local network. You may also want to add your 192.168.0.1 to the local domains whitelist under spamfilter configuration, as well as the fully qualified domain name of the box that spamfilter is running on. Net traffic will not flow into your network if you are using local NAT address's on an outside DNS box. If you have the mail server on the same box as spamfilter, you will also need to change the SMTP port for IMail and make the destination change in spamfilter to point to the mail server. I am running the same setup myself almost exactly, except different IPs and IMail version. PM me if you want details on how to make this work legitly and be legal on the net.

-------------
Michael
support@spacequad.com
If blocked, use spacequad@hotmail.com
Spacequad Internet Services
Spacequad AntiSpam Services
Thunder Bay, Ontario
--------------------------------------------------

Posted By: morten44
Date Posted: 20 March 2008 at 5:05am

Thanks for your responds. I will try to install local DNS and see if that helps :)

Will update late next week as i am going away.

IP added to whitelist.Not sure on domain name as its just a win2000 Server with a one word name "serverweb"

Thanks again

Morten

Posted By: LogSat
Date Posted: 20 March 2008 at 11:33pm

Morten,

Please note that most of SpamFilter's various filters rely on the need to "see" the original IP address of the remote server. Some other filters, like the SPF filter for example, instead *require* to see the IP of the sender, or in some cases they will cause valid emails to be rejected. This is because some domains specify via DNS which IP addresses are allowed to send emails on their behalf. If SpamFilter does not see the original IP address, it will reject the email as it see it coming from an un-authorized IP.

If your SpamFilter is behind a firewall, the firewall will need to be configured so that it does not "mask" the IP of the sender. in your sample post we see the connection to SpamFilter originating from 192.168.0.1, which is your firewall, and not the real IP of the remote machine. This will prevent SpamFilter from working correctly.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: morten44
Date Posted: 28 March 2008 at 6:29pm

Thanks for Following up that Roberto. I understand what you mean. Will look into configurating the firewall.Have been away for a week so sorry for late respond.

Will let you know how I get on :)

Kind Regards

MOrten

Posted By: morten44
Date Posted: 07 April 2008 at 12:11pm

Hi Roberto

Thanks for your last answer. The setting was changed in my router and it picked it up correct. now working fine :)

Thanks alot

Print Page | Close Window