1.о том что оба интерфейса
192.168.0.24 и 192.168.1.30
через cisco2811 глядят в инет я уже писал
(могу выслать конф если интересно)
2.squid настроен на 192.168.0.24
на клиентах естественно (ie) proxy на 192.168.0.24
3.fetchmail принимает почту через 192.168.1.30
4.на клиентах почты (the bat,outlook...) smtp,pop3 192.168.1.30
5.iptables для некоторых инет приложений (в том числе почтовых) настроен на 192.168.1.30

Где это можно посмотреть?
если в access то какая запись должна быть?

разве это не по default gw происходить?

если отправляю я то
The original message was received at Mon, 31 Mar 2008 17:04:43 +0400
from [192.168.1.33]

или вот еще

The original message was received at Sat, 29 Mar 2008 19:09:45 +0400
from localhost
with id m2TFwew3002608

----- The following addresses had permanent fatal errors -----
<lefimkin@zdship.ru>
(reason: 451 bad reverse DNS)

надо сделать так чтобы интерфейс, с которого почта уходит во внешний мир, был не 192.168.0.x, а, скажем, 217.66.70.x

We have very bad news for you: It is not you, it is your complete provider which got listed.
Your IP 217.23.188.150 was NOT part of a spamrun, but your provider seems to believe that spam is what the internet was made for.
By tolerating your provider doesn't care about spammers you are also supporting the global spam.
If all people would boycott spammerhaevens, spam-friendly providers wouldn't even exist.

Please send a compliant to your provider and request him to fix this problem immediatly.
Think about this: You pay him for, that you can use the internet without problems.

If he ignores your complaint or claims he can't do anything, you should consider to change your provider.
Don't accept to be fooled. If your provider really wants to stop spam he would install preventive measures.

This 4 little steps would make the difference - and they can be done in less than one hour.

Can't you make an exception for me?
We never make exceptions. Requests are futile. Only your provider can fix this problem.

How can my providers total ip-space be removed from UCEPROTECT-Level 3?
After your provider has fixed his problems, the UCEPROTECT-Level 3 listing will be removed automatically and free of charge as soon as the causal Level 1 listings will expire. Every IP listed at Level 1 expires 7 days after we have seen the last abusive action coming from it.
If your provider don't want to wait for free expiration, he can optionally do Expressdelisting, which is charged a total of 250 EURO.
That is a huge discount compared to our charges for Level 2 or even Level 1 expressdelistings.
It is necessary that problems are fixed in first place, otherwise your providers complete IP-space might end up in Level 3 again within a short timeframe.

Тогда жалуйся, что зону блокируют. Это скорее всего так и есть.
А когда жалобу рассмотрят и вылечат - будем делать дальше...

а как понять что
nslookup 217.23.176.2
часто выдает разный результат?