Re: [Assp-test] UnknownLocalSender / SpoofedSender for non-local domain

[Thomas E. <Tho...@th...>]

check the content of 'ldaplistdb' and remove all nolocal domain entries.

eg.
@web.de

Thomas





Von:    "Zrin Ziborski" <zri...@zi...>
An:     "ASSP development mailing list" <ass...@li...>
Datum:  29.01.2018 16:24
Betreff:        [Assp-test] UnknownLocalSender / SpoofedSender for 
non-local domain



ASSP version 2.5.5(17223)

Helo all,

I've noticed [UnknownLocalSender] and [SpoofedSender] in the log for an 
external incoming e-mail that has non-local from address:

2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4 
<xx...@we...> info: found message size announcement: 9.62 kByte
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [UnknownLocalSender] 
212.227.15.4 <xx...@we...> [monitoring] (Invalid Local Sender 
'xx...@we...')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [SpoofedSender] 
212.227.15.4 <xx...@we...> [scoring] (No Spoofing Allowed 
'xx...@we...' in 'mailfrom')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4 
<xx...@we...> Message-Score: added 37 (slValencePB) for No Spoofing 
Allowed 'xx...@we...' in 'mailfrom', total score for this message is 
now 37
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4 
<xx...@we...> to: rr...@de... info: remove IP-score from 
212.227.15.4 - this mail passed the SPF check
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4 
<xx...@we...> to: rr...@de... Message-Score: added -5 
(spfpValencePB) for SPF pass, total score for this message is now 32

Settings:

LocalAddresses_Flat: <empty>
localDomains: file:files/localdomains.txt
DoVRFY: on

files/localdomains.txt does NOT contain "web.de".

LDAP is not used there.

What can cause this behavior?
What can I do to debug that?

Thank you in advance,
Zrin



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-test







DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************