Home / user-75370

grantk's questions

Martin Hope
grantk
Asked: 2011-05-11 04:31:58 +0800 CST
  • 3

I have recently been receiving spam that has been listed as my own email address. I remember doing a few telenet emails back in school and know there are some ways to send looking like they are coming from a different place but wanted to ask others opinions on this. The server is a Zimbra 6.06 server running on Debian lenny. Does anyone think there is possibly something wrong with the setup here or is this just some spoofing going on? I can see that the email is coming from outside of the network of course. 

Return-Path: [email protected]
Received: from zimbra.example.com (LHLO zimbra.example.com) (10.0.0.1) by
 zimbra.example.com with LMTP; Tue, 10 May 2011 06:00:40 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1])
    by zimbra.example.com (Postfix) with ESMTP id D2B9759FC5
    for <[email protected]>; Tue, 10 May 2011 06:00:40 -0500 (CDT)
X-Virus-Scanned: amavisd-new at zimbra.example.com
X-Spam-Flag: YES
X-Spam-Score: 8.593
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.593 tagged_above=-10 required=6.6
    tests=[BAYES_99=3.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
    RDNS_NONE=0.1] autolearn=no
Received: from zimbra.example.com ([127.0.0.1])
    by localhost (zimbra.example.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id 5Be4Ob1KSuhu for <[email protected]>;
    Tue, 10 May 2011 06:00:39 -0500 (CDT)
Received: from [81.211.11.134] (unknown [81.211.11.134])
    by zimbra.example.com (Postfix) with ESMTP id 44CBC59D4F
    for <[email protected]>; Tue, 10 May 2011 06:00:39 -0500 (CDT)
Received: from 81.211.11.134(helo=example.com)
    by example.com with esmtpa (Exim 4.69)
    (envelope-from )
    id 1MMKY8-2034hf-28
email spam zimbra
Martin Hope
grantk
Asked: 2011-03-25 05:35:58 +0800 CST
  • 0

I am running split dns and generally have access to my sites internally.

The exception comes when I am hosting a site that is not under my main domain.

I can set up external and internal dns entries for anything I have at *.example.com and reach these sites both internally and externally.

My problem comes with sites not under *.example.com

Say I have just set up test.com, It has an internal ip of say 192.168.1.55. I threw the test.com address in an extrenal browser and I see what I want.

So If I try giving test.com an A and PTR entry pointing to the 192.168.1.55 address in my internal dns that does not work.

I am sure there is a fantastic reason for this as you would not want others hijacking your domain, but I would also like my internal users to see these sites.

Can anyone point me in the right direction?

domain-name-system bind
Martin Hope
grantk
Asked: 2011-03-23 05:26:39 +0800 CST
  • 2

I have to make a few changes to some dns records for a domain I am responsible for and wanted to double check my thinking. Currently the domain is set up with NS, A, PTR and MX records.

What I need to accomplish is moving web traffic from ip X to ip Y. I can not do so internally because there are a number of other domains that rely on this ip address now. I prefer not to proxy the traffic using apache either. So..

The only thing that needs to change in my opinion is the A and PTR record. I just need to be able to move the web traffic from one ip to another. Nameservers will not change so no reason to change the NS records, mail is not changing so I do not want to move the MX record.

Does this look right?

domain-name-system