From: Scott M. <as...@ho...> - 2010-04-15 20:13:24
|
Looking into this some more, I see a lot of valid messages rejected with SpoofedSender errors, when the sender domain was not a local domain. I suspect this is related to the ForgedHELO problem - both are treating remote domains as local, and incorrectly rejecting valid email as a result. At 02:34 PM 4/15/2010, Scott MacLean wrote: >I installed the two LIB files and installed .10 this morning. My >clients immediately started screaming, because almost all of the mail >people were sending them was bouncing. > >I had a look at the logs, and to my horror, almost every connection >was being reported as a forged HELO, even though the IP address >connecting had an RDNS entry that matched the server being declared >in the HELO. For example: > >Apr-15-10 08:32:03 FS-34723-04847 [Worker_7] [ForgedHELO] 72.22.94.32 ><xx...@jp...> to: yy...@my... (forged Helo: >'mail.jpsequipment.com') > >My local server is most certainly not mail.jpsequipment.com, and >72.22.94.32 has a RDNS entry of mail.jpsequipment.com. This should >not be detected as a ForgedHELO. > >I have thousands of these invalid ForgedHELO entries in my log from today. > >I have reverted back to version .08 for the time being. > > >At 04:19 AM 4/15/2010, Thomas Eckardt wrote: > > >Hi all, > > > >fixed in 2.0.2_1.0.10: > > > >- if noSPFRe is used an error 'Unmatched ( in regex; marked by <-- HERE > >in m/( <-- HERE (?-xism:(?is:.....))/ at assp.pl line 14653. > >' > >cause the thread (Worker) to die. > > > > > >changed: > > > >- if VRFY or RCPT TO check is used and the MTA is not available - assp now > >uses 'LDAPFail' to decide if the adrress is valid or not. > > > >'LDAPFail','LDAP/VRFY failures return > >false',20,\&checkbox,'','(.*)',undef,'If checked, when an error occurs in > >LDAP or VRFY lookups, the test fails. > > > > > >Thomas > > > >DISCLAIMER: > >******************************************************* > >This email and any files transmitted with it may be confidential, legally > >privileged and protected in law and are intended solely for the use of the > > > >individual to whom it is addressed. > >This email was multiple times scanned for viruses. There should be no > >known virus in this email! > >******************************************************* > > > > > > > >------------------------------------------------------------------- > ----------- > >Download Intel® Parallel Studio Eval > >Try the new software tools for yourself. Speed compiling, find bugs > >proactively, and fine-tune applications for parallel performance. > >See why Intel Parallel Studio got high marks during beta. > >http://p.sf.net/sfu/intel-sw-dev > >_______________________________________________ > >Assp-test mailing list > >Ass...@li... > >https://lists.sourceforge.net/lists/listinfo/assp-test >------------------------------------------------------------------------------ >Download Intel® Parallel Studio Eval >Try the new software tools for yourself. Speed compiling, find bugs >proactively, and fine-tune applications for parallel performance. >See why Intel Parallel Studio got high marks during beta. >http://p.sf.net/sfu/intel-sw-dev >_______________________________________________ >Assp-test mailing list >Ass...@li... >https://lists.sourceforge.net/lists/listinfo/assp-test |