Hi Thomas,

> The sending IP has to be in acceptAllMail

We added sending IP (10.0.0.10) on the slave ASSP in acceptAllMail.
BlockReportRequests and requests to resend blocked mail are processed now,
but something still seems to be wrong here.

Let's see the maillog.

BlockReportRequest on the master ASSP:

Dec-27-11 17:57:46 m1-01466-13823 [Worker_5] 10.7.240.30 <[email protected]> 
info: found message size announcement: 1.93 kByte
Dec-27-11 17:57:46 m1-01466-13823 [Worker_5] 10.7.240.30 <[email protected]> 
to: [email protected] blocked email report
Dec-27-11 17:57:47 [Worker_5] Info: queued blocked mail request from 
[email protected]
Dec-27-11 17:57:50 [Worker_10000] Info: processing queued blocked mail request 
from [email protected]

and forwarded BlockReportRequest on the slave ASSP:

Dec-27-11 17:57:47 m1-01467-11454 [Worker_2] 10.0.0.10 <[email protected]> to: 
[email protected] blocked email report
Dec-27-11 17:57:47 [Worker_2] Info: queued blocked mail request from 
[email protected]
Dec-27-11 17:57:47 m1-01467-02333 [Worker_2] 10.0.0.10 [SMTP Error] 500 
unrecognized command
Dec-27-11 17:57:48 [Worker_10000] Info: processing queued blocked mail request 
from [email protected]

Though SMTP Error is here, we received ASSP-Block-Report from the slave ASSP.

Next, we requested to resend blocked mail from the slave ASSP.
Request on the master ASSP:

Dec-27-11 17:59:48 m1-01588-03288 [Worker_1] 10.7.240.30 <[email protected]> 
info: found message size announcement: 2.57 kByte
Dec-27-11 17:59:48 m1-01588-03288 [Worker_1] 10.7.240.30 <[email protected]> 
to: 
RSBM_spamx2FXxD0Xx9BXxD1Xx83XxD1Xx87XxD1Xx88XxD0XxB8XxD0XxB5Xx5FXxD1Xx80XxD0XxB5XxD0XxB7XxD1Xx83XxD0XxBBXxD1Xx8CXxD1Xx82XxD0XxB0XxD1Xx82XxD1Xx8BXx5FXxD1Xx83Xx5FXxD0XxBDXxD0XxB0XxD1Xx81Xx2DXx2DX16291.eml@assp.local
 blocked email report
Dec-27-11 17:59:48 [Worker_1] Info: queued blocked mail request from 
[email protected]
Dec-27-11 17:59:50 [Worker_10000] Info: processing queued blocked mail request 
from [email protected]

and forwarded request on the slave ASSP:

Dec-27-11 17:59:49 m1-01589-10178 [Worker_2] 10.0.0.10 <[email protected]> to: 
RSBM_spamx2FXxD0Xx9BXxD1Xx83XxD1Xx87XxD1Xx88XxD0XxB8XxD0XxB5Xx5FXxD1Xx80XxD0XxB5XxD0XxB7XxD1Xx83XxD0XxBBXxD1Xx8CXxD1Xx82XxD0XxB0XxD1Xx82XxD1Xx8BXx5FXxD1Xx83Xx5FXxD0XxBDXxD0XxB0XxD1Xx81Xx2DXx2DX16291.eml@assp.local
 blocked email report
Dec-27-11 17:59:49 [Worker_2] Info: queued blocked mail request from 
[email protected]
Dec-27-11 17:59:49 m1-01589-00333 [Worker_2] 10.0.0.10 [SMTP Error] 500 
unrecognized command
Dec-27-11 17:59:51 [Worker_10000] Info: processing queued blocked mail request 
from [email protected]
Dec-27-11 17:59:51 m1-01591-04349 [Worker_3] 10.0.0.10 <[email protected]> to: 
RSBM_spamx2FXxD0Xx9BXxD1Xx83XxD1Xx87XxD1Xx88XxD0XxB8XxD0XxB5Xx5FXxD1Xx80XxD0XxB5XxD0XxB7XxD1Xx83XxD0XxBBXxD1Xx8CXxD1Xx82XxD0XxB0XxD1Xx82XxD1Xx8BXx5FXxD1Xx83Xx5FXxD0XxBDXxD0XxB0XxD1Xx81Xx2DXx2DX16291.eml@assp.local
 blocked email report
Dec-27-11 17:59:51 [Worker_3] Info: queued blocked mail request from 
[email protected]
Dec-27-11 17:59:51 m1-01591-09836 [Worker_3] 10.0.0.10 [SMTP Error] 500 
unrecognized command
Dec-27-11 17:59:56 [Worker_10000] Info: processing queued blocked mail request 
from [email protected]
Dec-27-11 17:59:56 [Worker_10000] Error: unable open 
/usr/local/share/assp/spam/п⌡я┐я┤я┬п╦п╣_я─п╣пЇя┐п╩я▄я┌п╟я┌я▀_я┐_пҐп╟я│--16291.eml
Dec-27-11 17:59:56 [Worker_10000] Info: successful sent file 
/usr/local/share/assp/resendmail/п⌡я┐я┤я┬п╦п╣_я─п╣пЇя┐п╩я▄я┌п╟я┌я▀_я┐_пҐп╟я│--16291.eml
 to 127.0.0.1:125 (smtpDestination) - Message sent

We received resendmail (...16291.eml) from the slave ASSP,
but also we received message about failed request:

Subject: failed - request ASSP to resend blocked mail

The requested email-file 
spam/Лучшие_результаты_у_нас--16291.eml no longer exists on 
ASSP-host mx2.fcxxx.com.ua.
Please contact your email adminstrator, if you need more information.

Maybe it happen because of SMTP Error?

May I supply additional information?

Thanks in advance.

Mike.



> Hi Thomas,

> We have two ASSP (10.0.0.10 as master and 10.0.0.11 as slave)
> and have been using Block Reporting.

> Directly sended BlockReportRequests are processed correctly on both ASSP.

> But when we used BlockRepForwHost feature on the master ASSP, then 
> forwarded requests
> are blocked on the slave ASSP as InvalidLocalSender (Spoofing Sender
> in Local Domain):

> Dec-27-11 15:15:22 m1-91722-14308 [Worker_3] [InvalidLocalSender] 
> 10.0.0.10 <[email protected]> [spam found] Spoofing Sender in Local Domain
> Dec-27-11 15:15:22 m1-91722-14308 [Worker_3] 10.0.0.10 <[email protected]>
> [SMTP Error] 554 5.7.1 Spoofing Sender in Local Domain .
> Dec-27-11 15:15:22 m1-91722-14308 [Worker_3] 10.0.0.10 <[email protected]>
> [SMTP Status] 451 4.7.1 Please try again later

> If we added IP 10.0.0.10 on the slave ASSP in allowRelayCon or in 
> noSpoofingCheckIP, then we have other error:

> Dec-27-11 15:25:50 m1-94148-07049 [Worker_7] 10.0.0.10 <[email protected]>
> no recipients left -- dropping connection
> Dec-27-11 15:25:50 m1-94148-07049 [Worker_7] 10.0.0.10 <[email protected]>
> Message-Score: added 5 for invalid address [email protected], total
> score for this message is now 15
> Dec-27-11 15:25:50 m1-94148-07049 [Worker_7] 10.0.0.10 <[email protected]>
> [SMTP Error] 503 5.5.2 Need Recipient
> Dec-27-11 15:25:50 m1-94148-07049 [Worker_7] 10.0.0.10 <[email protected]>
> [SMTP Status] 451 4.7.1 Please try again later

> Configuration:

> Master ASSP

> ExtraBlockReportLog:=1
> EmailBlockReport:=asspblock
> EmailBlockReportDomain:[email protected]
> EmailBlockReply:=3
> QueueUserBlockReports:=0
> BlockRepForwHost:=10.0.0.11:225
> EmailBlockTo:[email protected]
> BlockReportFile:=
> BlockReportSchedule:=0
> BlockReportNow:=
> BlockMaxSearchTime:=0
> BlockReportFormat:=0
> BlockReportHTTPName:=
> BlockReportFilter:=Virus|BlackDomain
> BlockResendLink:=2
> BlockResendLinkLeft:=
> BlockResendLinkRight:=

> Slave ASSP

> ExtraBlockReportLog:=1
> EmailBlockReport:=asspblock
> EmailBlockReportDomain:[email protected]
> EmailBlockReply:=3
> QueueUserBlockReports:=0
> BlockRepForwHost:=
> EmailBlockTo:[email protected]
> BlockReportFile:=
> BlockReportSchedule:=0
> BlockReportNow:=
> BlockMaxSearchTime:=0
> BlockReportFormat:=0
> BlockReportHTTPName:=
> BlockReportFilter:=Virus|BlackDomain
> BlockResendLink:=2
> BlockResendLinkLeft:=
> BlockResendLinkRight:=

> ASSP Version: 2.1.2(11358), Perl 5.012004 on both.

> May I supply additional information?

> Thanks in advance.

> Mike.


------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to