How to exclude a certain IP/IP range from reverse DNS checks
Article updated on 22 January, 2008
Description
How to exclude a certain IP/IP range from reverse DNS checks
Resolution
In a setup were the AXIGEN Mail Server is configured with the Reject message if the originating IP has no reverse DNS entry option as an antispam method, excluding an IP/IP range from the reject action can be configured via WebAdmin->Security & Filtering context-> Advanced Settings section, by adding a new Acceptance / Routing rule.
From this new section you should:
Define a suggestive name for this rule for ease of tracking the action enforced.
In the Conditions area you should make sure that this rule is applied For incoming messages that match ALL of the conditions
Next, you should add the following two conditions:
Remote address->IP add this rule and configure it to match the address/address range. This condition can be configured by defining the IP address as single IP/ IP range/ CIDR/ Netmask format
DNS checks->Reverse DNS, this condition should be configured with Fail as the result.
From the Actions section add the following entry:
SMTP->action and set this to Accept
Please note that the Explanation section is optional for this setting.
By saving the new configuration details of this SMTP Acceptance and Routing rule, e-mails received from the defined IP/IP range will be accepted even if the reverse DNS checks fail.
Applies to
Releases: Mail Server 5.0.X
OS: Linux, FreeBSD, OpenBSD, NetBSD, Solaris
Distros: RPM based distros, RPM based distros with gcc4, Slackware, Debian, Ubuntu, Gentoo, FreeBSD 5.4, NetBSD 3.0, OpenBSD 3.8, OpenBSD 3.9, Solaris 10 x86, FreeBSD 6.1, Mandriva Linux, DEB based distros with gcc4, Yellow Dog, Solaris 10 SPARC
Comments
