Menu
▾
▴
[Assp-user] Understanding blockSPFstrict
|
From: Luigi C. <lu...@it...> - 2012-10-31 12:05:55
|
Hello list, my ASSP Version: 1.9.4.6(1.0.02) on an openvz debian squeeze. not sure to understand how blockSPFstrict works. I have this on a real invoice from ebay: [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... Regex:blockSPFstrict '@ebay.it'; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... Regex:strictSPF '@ebay.it'; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... [scoring] spf_result:pass; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... identity:bi...@eb...; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... scope:mfrom; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... spf_record:v=spf1 mx include:s._spf.ebay.com include:m._spf.ebay.com include:p._spf.ebay.com include:c._spf.ebay.com ~all; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... local_exp:ebay.it: Sender is authorized to use 'bi...@eb...' in 'mfrom' identity (mechanism 'include:s._spf.ebay.com' matched); [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... authority_exp:; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... received_spf:Received-SPF: pass (ebay.it: Sender is authorized to use 'bi...@eb...' in 'mfrom' identity (mechanism 'include:s._spf.ebay.com' matched)) receiver=artika.rete.us; identity=mailfrom; envelope-from="bi...@eb..."; helo=mxslcpool14.ebay.com; client-ip=66.135.215.80; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... Message-Score: added 35 for SPF pass, total score for this message is now 35; [SSL-in] [SSL-out] [SPF] 66.135.215.80 <bi...@eb...> to: an...@xx... [spam found][blocked] -- SPF pass - strictblock -- [Fattura eBay - Lunedì, 15 Ottobre 2012] -> corpus/spam/Fattura_eBay_Luned_15_Ottobre___9182.eml; [SSL-in] [SSL-out] 66.135.215.80 <bi...@eb...> to: an...@xx... [SMTP Error] 554 5.7.1 Mail (art-35071-18674) appears to be unsolicited - "failed SPF: ebay.it: Sender is authorized to use 'bi...@eb...' in 'mfrom' identity (mechanism 'include:s._spf.ebay.com' matched)" - resend with 424242 appended to subject and contact pos...@xx... for resolution; I'm expecting an add of -35 because of a strict validation passed, because i read this in the gui: All failed messages will be blocked for these sending addresses. Put anything here to identify the addresses. For example: '@ebay.com|@paypal.com|@facebook.com' I've interpreted, based on these examples, that all messages coming from a fake bi...@eb... will 100% blocked, but a real bi...@eb... will add -35 if pass. Can anyone enlighten me on this? -- # Luigi Cocconcelli |