Hello today I received a message from 2checkout , with no attachment , but it received
25 (SuspiciousAttachment) Jul-26-07 04:35:11 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] recipient accepted: [EMAIL PROTECTED] Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Regex:SuspiciousAttachment '' Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Message-Score: 0+25 (SuspiciousAttachment) Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] URIBL scoring Received-URIBL: pass Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] ClamAV: scanning 769 bytes done OK Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] Bayesian Check Prob: 0.00000 => ham Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] passing if safe because of messagescore lowlimit Jul-26-07 04:35:12 64.128.185.221 <[EMAIL PROTECTED]> to: [EMAIL PROTECTED] spam determined to be safe, passing on to recipient Is there a problem ? Graziano > Hi Fritz. > > On 26/07/2007, at 3:09 PM, Fritz Borgstedt wrote: > > >> A local address is not sufficient to be considered local, that should >> be obvious. >> > > It is. > > >> The user must use authentication and/or a trusted ip to be "local". >> > > Authentication is used. > > >> However ASSP allows to skip this part of protection by setting >> "Accept Remote Sender with Valid Local Addresses" >> (Consider Remote Sender with Valid Local Addresses as NOT spoofed). >> > > James. > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > > ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
