Reverse DNS Lookup problem |
Post Reply 
|
| Author | |
Jakob 
Guest Group 
|
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Reverse DNS Lookup problemPosted: 18 May 2003 at 8:21am |
|
Hi there I have recently installed Spamfilter. My mailserver and spamfilter is on the same server behind a NAT-router/firewall. The problems is the DNS lookup, as it tries to lookup the LAN IP (192.168.1.1) of my router. Therefore any emails will naturally be rejected. Now if I disable Reverse DNS lookup, spamfilter hardly catches any spammails. It still does MAPS lookup though. What can I do? (sorry for my lousy english) |
|
 |
|
|
metrotel
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 9:09am |
|
If you have DNS running on a server behind your firewall you could create a reverse zone for your private dns.
|
|
|
|
|
metrotel
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 9:10am |
|
If no DNS server you could put an entry in your HOSTS file on the server that SpamFiler is running on.
|
|
|
|
|
Jakob
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 9:38am |
|
I see your point, but is it really necessary to for Spamfilter to lookup DNS in order to work?
|
|
|
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 9:53am |
|
Jakob, In order to function with the most capabilities, SpamFilter must be able to *see* the real IP of the remote server connecting to your network. It is based on the sender's IP address that SpamFilter can lookup that IP in the blacklists, see what country it's from, check if it has a reverse DNS and more. If I understood you correctly, during the DNS lookup of an incoming connection SpamFilter is trying to resolve your 192.168.1.1 address. If this is so, it means that your router/firewall is accepting the incoming connection, but it then provides SpamFilter with a translated address of 192.168.1.1, not the original IP. Without that original IP, SpamFilter's functionality is severily crippled... If I correctly understood your configuration, you will need to configure your firewall so that it provides SpamFilter with the true IP address of the sender. Roberto Franceschetti |
|
|
|
|
Jakob
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 9:56am |
|
Thanks for your very quick answer. So the conclusion is that Spamfilter doesn't work with NAT routers? |
|
|
|
|
Jakob
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 10:03am |
|
Sorry....forget that last post. It was only a matter of configuring my firewall correctly. It was configured for masquerading on the private interface. Thanks for you support :-) |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 18 May 2003 at 10:06am |
|
Glad it worked! I would not have been able to help on the firewall side. The ones I've dealt with allow that to be done in a way or another, but they're all different... Roberto |
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.227 seconds.