>Is X-Originating-IP something that's checked?
yes - this is a perfect information for assp
>X-Originating-IP: [::ffff:W.X.Y.Z]
this leads in to two IP's that are put at the IP-address stack - the
extracted IPv4 followed by the expanded IPv6 (important: exactly in this
order !)
because : enhancedOriginIPDetect is set to "all but most origin"
the IPv6 is removed from the stack - but the IPv4 (extracted from the same
header line) is used as origin IP - this is wrong in this case and will be
corrected in the next release
Thank you
Thomas
Von: K Post <nntp.p...@gmail.com>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum: 19.03.2016 23:22
Betreff: [Assp-test] Bad DNSBL detection
Saw an email get rejected due to a hit on DNSBL. It was from a legit user
using Comcast's (major ISP here in the US) webmail system.
All of the received lines were fine, and the home cable modem's address
was
not listed there.
However, there was a line below the received lines like this:
X-Originating-IP: [::ffff:W.X.Y.Z]
It looked like an IPV6 address, but my research showed that W.X.Y.Z was
actually the ipv4 address of the user's home cable modem/router and that
IP
was correctly in DNSBL.
enhancedOriginIPDetect is set to "all but most origin"
I haven't seen this before, but could have certainly missed others. Just
happened to catch this one.
Is X-Originating-IP something that's checked?
Bug? Did I do something wrong? Any way to insure this doesn't happen
again?
Thanks
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785231&iu=/4140
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
