Problem: RDNS_NONE positive for localhost / 127.0.0.1

[z-user]

Hi,

Problem: mail sent internally (through the webmail interface) gets a positive score on RDNS_NONE. We have set RDNS_NONE to a score of 5, because mail from external mail servers without reverse DNS should be blocked.

Unfortunately, our internal email ends up in the junk box as well.

We have tried to figure out where/how to fix 127.0.0.1 getting a positive RDNS_NONE score, but so far have not found the right solution.


Ofcourse we could lower RDNS_NONE to less than 5, but that would be a dirty hack, not a fix.

Here is (part of) an affected email header.

X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: 4.277
X-Spam-Level: ****
X-Spam-Status: No, score=4.277 tagged_above=-10 required=6.6 tests=[AWL=0.003,
BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.995,
RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=5]
Received: from mail.myserver.com ([127.0.0.1])

Problem appears to be that a reverse DNS lookup is done on 127.0.0.1 which fails. Any idea how/where to fix this so the Received: line would look like:

Received: from mail.myserver.com (localhost [127.0.0.1])

or

Received: from mail.myserver.com (mail.myserver.com [127.0.0.1])

[uxbod]

You would appear to have a issue with your DNS then as a RDNS entry for localhost should be available.

[phoenix]

You should be using a LAN IP for your Zimbra server, are you? Post the output of the following commands (run on the zimbra server):

cat /etc/resolv.conf
cat /etc/hosts
dig yourdomain.com mx
dig yourdomain.com any
host `hostname` <-- type that exactly with backticks not single quotes

[imx]

Did this get fixed? Im seeing exactly the same issue, i think, since my upgrade to 6.0.6.

All host entries are correct, rdns works (and has been proved with dig) for local and server hostname,....

[imx]

Ive turned up the amavis logging to 5, however is there a way i can see the actual process/response from each plugin? I dont see how/why it would not be getting an rdns response...everything that ive tested, it does!

God damn i wish Solaris was supported so we had access to dtrace.....