check the content of 'ldaplistdb' and remove all nolocal domain entries.
eg.
@web.de
Thomas
Von: "Zrin Ziborski" <zrin+a...@ziborski.net>
An: "ASSP development mailing list" <assp-test@lists.sourceforge.net>
Datum: 29.01.2018 16:24
Betreff: [Assp-test] UnknownLocalSender / SpoofedSender for
non-local domain
ASSP version 2.5.5(17223)
Helo all,
I've noticed [UnknownLocalSender] and [SpoofedSender] in the log for an
external incoming e-mail that has non-local from address:
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<xxx....@web.de> info: found message size announcement: 9.62 kByte
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [UnknownLocalSender]
212.227.15.4 <xxx....@web.de> [monitoring] (Invalid Local Sender
'xxx....@web.de')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] [SpoofedSender]
212.227.15.4 <xxx....@web.de> [scoring] (No Spoofing Allowed
'xxx....@web.de' in 'mailfrom')
2018/01/03 20:47:08 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<xxx....@web.de> Message-Score: added 37 (slValencePB) for No Spoofing
Allowed 'xxx....@web.de' in 'mailfrom', total score for this message is
now 37
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<xxx....@web.de> to: rrr....@defrance.at info: remove IP-score from
212.227.15.4 - this mail passed the SPF check
2018/01/03 20:47:09 08828-29715 [Worker_1] [TLS-in] 212.227.15.4
<xxx....@web.de> to: rrr....@defrance.at Message-Score: added -5
(spfpValencePB) for SPF pass, total score for this message is now 32
Settings:
LocalAddresses_Flat: <empty>
localDomains: file:files/localdomains.txt
DoVRFY: on
files/localdomains.txt does NOT contain "web.de".
LDAP is not used there.
What can cause this behavior?
What can I do to debug that?
Thank you in advance,
Zrin
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
