> So, we still have the original problem: the port setup and firewall  
> are such that nothing can get to postfix from the outside, yet some  
> mail does get past assp, apparently directly to postfix.

Ok; we had to be sure there wasn't something listening on 25/tcp
yet I can't understand why, as you reported, sometimes ASSP
logs an error due to a port being in use... anyways...

The fact that the SMTP server sees the emails coming from the
127.0.0.1 IP and the fact that such emails don't carry the ASSP
headers seems to indicate that there must be something else
running on the system and allowing to reach the SMTP server
using the loopback address; such a program has to be listening
on a public IP and "tunnelling" the connection toward 127.0.0.1
the public IP listening port may even not be 25; so, the next step
may be running nmap against the listening ports and grabbing
the "banner" to see if one of those ports returns the SMTP
server banner; if that doesn't bring any results, that I'd check
if the server is running any kind of web service; in such a case
the "assp bypass" may come from some page or cgi allowing
to directly send emails



------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to