check the content of 'ldaplistdb' and remove all nolocal domain entries.
eg.
@web.de
Thomas
Von: "Zrin Ziborski" <[email protected]>
An: "ASSP development mailing list" <[email protected]>
Datum: 29.01.2018 16:24
Betreff: [Assp-test] UnknownLocalSender / SpoofedSender for
non-local domain
ASSP version 2.5.5(17223)
Helo all,
I've noticed [UnknownLocalSender] and [SpoofedSender] in the log for an
external incoming e-mail that has non-local from address:
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<[email protected]> info: found message size announcement: 9.62 kByte
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [UnknownLocalSender]
212.227.15.4 <[email protected]> [monitoring] (Invalid Local Sender
'[email protected]')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [SpoofedSender]
212.227.15.4 <[email protected]> [scoring] (No Spoofing Allowed
'[email protected]' in 'mailfrom')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<[email protected]> Message-Score: added 37 (slValencePB) for No Spoofing
Allowed '[email protected]' in 'mailfrom', total score for this message is
now 37
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<[email protected]> to: [email protected] info: remove IP-score from
212.227.15.4 - this mail passed the SPF check
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<[email protected]> to: [email protected] Message-Score: added -5
(spfpValencePB) for SPF pass, total score for this message is now 32
Settings:
LocalAddresses_Flat: <empty>
localDomains: file:files/localdomains.txt
DoVRFY: on
files/localdomains.txt does NOT contain "web.de".
LDAP is not used there.
What can cause this behavior?
What can I do to debug that?
Thank you in advance,
Zrin
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
