Hello guys.
I've recently installed assp. It's in "all test mode".
Then, I started to receive emails from outside my network from "local
senders" ("mail from" the same as the "rcpt to").
After reading the docs and searchg through the config options I've set
the "DoNoSpoofing" to "block", as it states "If activated, each external
sender address built with a domain in localDomains is regarded a spoofed
address. An external sender is a sender from an IP not in acceptAllMail
and not authenticated.".
My localdomains.txt:
# cat localdomains.txt
ige.unicamp.br
saturno.ige.unicamp.br
mailserver.ige.unicamp.br
popserver.ige.unicamp.br
listas.ige.unicamp.br
My acceptAllMail has my networks only.
Shouldn't this be blocked/rejected?
I've done a test from home, below:
220 saturno.ige.unicamp.br ESMTP Postfix
ehlo ****.virtua.com.br
250-saturno.ige.unicamp.br
250-STARTTLS
250-SIZE 20480000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
mail from:<****@ige.unicamp.br>
250 2.1.0 Ok
rcpt to:<****@ige.unicamp.br>
250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
Subject: Problem
test
.
250 2.0.0 Ok: queued as 27DF13DD3FB
quit
221 2.0.0 Bye
--
Ricardo Campos Passanezi - Administrador de Rede
Chave PGP e GPG Pública em: http://www.ige.unicamp.br/~****
Instituto de Geociências - http://www.ige.unicamp.br - UNICAMP
Tel: (19) 3521 4560
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
