[WBEL-users] Re: /var/log/messages - Interesting Entry

Ben Mohilef benm@dsl-only.net
Wed, 18 Aug 2004 19:01:12 -0700


A spammer probably happened to use wap.pangia.biz as a reply 
address, and sendmail asked the nameserver to get the IP 
corresponding to it. The rdns of that IP didn't match 
"wap.pangia.biz" and a message was generated. 

The rdns of the pangia address (66.28.189.115) returns as 
mail15.mail2world.com, so whoever registered the pangia address 
at register.com (the registrar of record) didn't coordinate with 
mail2world very well. Or, they want two rdns for that IP for 
whatever reason. Or, no one ever told mail2world about the domain 
registration. I didn't see smtp.pangia.com in the records, however.