Hi Thomas, Debugged a single email below N ASSP version: 2.2.2(12343) Worker 2 - Connection Data ---- last debug step was: ThreadMain - end looplast sigoff was : last sigoff in main, sub main::ThreadStart, 59, (eval), 0, , , at 13-3-3 17:2116 1365006076.00424 - 57last sigon was : last sigon in main, sub main::ThreadStart, 54, main::ThreadMain, 1, , , at 13-3-3 17:2116 1365006076.00415 - 251 this --------------------------------------this->maximumuri = this->allLoveBombsSpam = 0this->NOOPcount = 0this->nohelo = this->ciphelo = this->noscan = this->RWLokDone = this->obfuscateduri = this->socketcalls = 4this->pbblack = this->subject = this->allLoveRBLSpam = 2this->spamlover = 2this->bspams = this->rcvdTime = 1365005878this->rcptNonexistent = 0this->delayqueue = this->allLoveHiSpam = 2this->SIZE = 0this->spamconf = 0this->averror = this->nodamping = this->ccnever = this->loggedIpFromTo = 1this->fno = 18this->received = this->tagmode = this->localSenderOK = this->addressedToPenaltyTrap = this->addMSGIDsigDone = this->maxSize = this->acceptall = this->validHeloOK = this->localip = 77.36.34.151this->noprocessing = 1this->nopb = this->localport = 25this->rcptValidated = 0this->subject3 = this->rblfail = this->mailInSession = -1this->forgedhelodone = this->headerpassed = this->DMARCokDone = this->validhelodone = 1this->allLoveBaysSpam = 2this->dkimverified = this->dlslre = 2this->IPinHeloOK = this->ispip = this->red = this->debug = 0this->uhnoprocessing = 0this->msgtime = m-05878-08052this->allLoveATSpam = 2this->attachdone = this->rcvd = Received: from 46.158.86.231 ([46.158.40.136] helo=46.158.86.231) by inbound104.ourserver.com with SMTP (2.2.2); 3 Apr 2013 17:17:56 +0100 this->FromStrictOK = this->runlvl1PL = this->PTR = this->timestart = 1365005876this->rcptlist = HASH(0x32a3d838)this->spamloversonly = this->saveprepend = this->allLoveHlSpam = 2this->numrcpt = 1this->spamfound = this->type = Cthis->msgiddone = this->HMMdone = this->skipuriblPL = this->allLoveSpam = 2this->maxRealSizeExternal = this->rwlok = 1this->spamprob = 0this->nocollect = this->cip = this->maximumuniqueuri = this->forgedHeloOK = this->messagescore = 0this->helo = 46.158.86.231this->outgoing = this->testmode = this->alllog = this->rbldone = this->maillog = 1this->uri_listed_by = this->greetingSent = 1this->signed = this->client = IO::Socket::INET=GLOB(0x31a7f4b0)this->mfn = 8052this->allLoveMXASpam = 2this->hmmres = this->uribldone = this->addressedToSpamBucket = this->nobayesian = this->prepend = [NoProcessing]this->formathelodone = this->invalidSRSBounce = this->localsenderdone = this->spamloverdone = this->skipnotspam = this->lastcmd = DATAthis->allLoveURIBLSpam = 2this->saveprepend2 = this->userTempFail = this->noLog = this->nodkim = this->timelast = 1365005880this->mailfrom = hunchl@harbornet.comthis->allLovePBSpam = 2this->pbwhite = this->BlackHeloOK = this->rblneutral = this->bayesdone = this->senderok = this->baysprob = this->lastwritten = 1365005880this->friend = IO::Socket::INET=GLOB(0x33187880)this->subject2 = this->ip = 46.158.40.136this->ScriptOK = this->hasmallogname = this->messagelow = this->bayeslowconf = this->from = this->nodelay = this->firstrcvd = Received: from =host ([46.158.40.136] helo=) by inbound104.ourserver.com with *SMTP* (2.2.2);this->attachcomment = this->filescandone = this->maxSizeExternal = this->datastart = 0this->preheaderlength = 0this->allLoveDLSpam = 2this->hmmconf = this->isDKIM = this->maillogbuf = Received: from 46.158.86.231 ([46.158.40.136] helo=46.158.86.231) by inbound104.ourserver.com with SMTP (2.2.2); 3 Apr 2013 17:17:56 +0100 this->orghelo = HELO 46.158.86.231this->_ = this->messagereason = Regex:NoProcessingList 'hun...@harbornet.com'this->baystestmode = this->headerlength = 0this->maxRealSize = this->PTROK = this->allLoveBoSpam = 2this->relayok = 0this->clamscandone = this->nopbwhite = this->PBOK = this->isbounce = this->accBackISPIP = this->rblcache = this->delaydone = this->spamMaxScore = this->self = IO::Socket::INET=GLOB(0x31a7f4b0)this->backsctrdone = this->BATVrcpt = this->donotdelay = this->sayMessageOK = this->StatsmsgDelayed = this->logrecord = this->rcpt = st...@ourrecipient.co.ukthis->server = IO::Socket::INET=GLOB(0x33187880)this->invalidhelodone = this->whitelisted = this->fullhelo = ehlo inbound104.ourserver.comthis->obfuscatedip = this->PBExtremeOK = this->msgidsigdone = this->nomlog = this->port = 4575this->allLoveSPFSpam = 2this->delayed = this->sentEHLO = 1this->resetState = 1this->spfstrict = this->originalsubject = this->contentonly = this->BombHeaderOK = this->spfok = this->rcptnoprocessing = 0this->bombdone = this->doneDoDomainIP = this->messagescoredone = this->getline = CODE(0x102c0870)this->BATVfrom = this->MXAOK = this->MSGIDsigRemoved = this->rblcachedone = this->SpamCollectAddress = this->spambuf = 0this->hmmprob = this->invalidHeloOK = this->allLovePTRSpam = 2this->BlackDomainOK = this->userauth = HASH(0x33187d18)this->passingreason = noProcessingthis->writtenDataToFriend = 6this->myheader = X-Assp-Re-NoProcessingList: hun...@harbornet.comx-Assp-NoProcessing: YES - (noProcessing) this->allLoveISSpam = 2this->NoSpoofingOK = HASH(0x32eb2b78)this->allLoveSRSSpam = 2this->SPFokDone = this->ismaxsize = this->redsl = 2this->allLoveSBSpam = 2this->allLoveBlSpam = 2this->header = Received: from 46.158.86.231 ([46.158.40.136] helo=46.158.86.231) by inbound104.ourserver.com with SMTP (2.2.2); 3 Apr 2013 17:17:56 +0100 time only*
---------------------------------------- debug a single mail Thomas Von: Nick Marshall An: "assp-user@lists.sourceforge.net" , Datum: 03.04.2013 21:20 Betreff: Re: [Assp-user] Antwort: Wrong IP address in myHelo transparent mode Thanks Thomas for you feedback. I'm not getting the same result. Based on your headers, I wouldn't expect to see headers (1) on our ASSP v2 installation. Any idea what might be causing this - perhaps a config issue? What's your myhelo setting? Any other settings that impact this missing header? Thanks N On 3 Apr 2013, at 18:04, Thomas Eckardt wrote: > V2 adds its own received header every time. And there is IMHO no way to > skip this. > > > (3) Received: from myhost1 ([x.x.x.x]) > by myhost2 (Lotus Domino Release 8.5.3FP3 HF145) > with SMTP id 2013040318393206-106 ; > Wed, 3 Apr 2013 18:39:32 +0200 > (2) Received: from lists.sourceforge.net ([x.x.x.x]) > by myhost1 > ; Wed, 3 Apr 2013 18:39:30 +0200 > (1) Received: from lists.sourceforge.net ([216.34.181.88] > helo=lists.sourceforge.net) > by myhost1 with SMTPS(AES256-SHA) (2.2.2); 3 Apr 2013 > 18:39:25 +0200 > > > 1 - ASSP > 2 - hmailserver > 3 - domino > > Thomas > > > > > > Von: "Nick Marshall" > An: "'For Users of ASSP'" , > Datum: 03.04.2013 18:39 > Betreff: Re: [Assp-user] Antwort: Wrong IP address in myHelo > transparent mode > > > > Thanks for the reply. > > OK, when we switch to using 'MyName' in 'myHelo' instead of using > transparent mode, the results are then different in ASSP v2 than in v1. > See > below: > > MULTITHREAD (V2): > > Received: from inbound104.messagestream.com ([77.36.34.151]) > by inbound104.ourserver.com > with hMailServer ; Wed, 3 Apr 2013 17:17:59 +0100 > > > SINGLE THREAD (V1): > > Received: from inbound104.messagestream.com ([77.36.34.151]) > by inbound104.ourserver.com > with hMailServer ; Wed, 3 Apr 2013 17:24:21 +0100 > Received: from mail27.wdc03.rsgsv.net ([205.201.131.27] > helo=mail27.wdc03.rsgsv.net) > by inbound104.ourserver.com with ESMTP (ASSP 1.98); 3 Apr > 2013 > 17:24:11 +0100 > > > As you can see, in v1 we get an extra set of Received headers, which > represent the step between ASSP and the outside world - in v2, this step > is > missing. This is consistent with all emails received. > > > N > > > -----Original Message----- > From: Thomas Eckardt [mailto:thomas.ecka...@thockar.com] > Sent: 03 April 2013 16:19 > To: For Users of ASSP > Subject: [Assp-user] Antwort: Wrong IP address in myHelo transparent mode > > ASSP is a PROXY. So the MTA behind ASSP will every time see ASSP's > outbound > IP as connected IP. > > myHelo transparent mode: the helo will be transparent and will never match > the connected IP at the MTA > > Thomas > > > > > > Von: "" > An: , > Datum: 03.04.2013 17:10 > Betreff: [Assp-user] Wrong IP address in myHelo transparent mode > > > > Hi All, > > > > We're just upgrading from v1 to v2 ASSP and we have a different behaviour > with the transparent mode of myHelo in the email headers of inbound mail. > > > > As you'll see from the typical headers below, the server connects from the > sending server to hMailserver behind ASSP correctly, however the IP > address > listed here - 77.36.34.151 - is the IP address of the local machine, and > not > the IP of the hostname 'incisivemedia.outbound.ed10.com'. This causes all > sorts of problems for us with some indexing systems we have further down > the > line, so does anyone have any idea what's causing this, or a way of > getting > round the problem - we need to use transparent mode and be able to see the > sending server, but the IP address must match the hostname. > > > > --- > > > > Received: from incisivemedia.outbound.ed10.com ([77.36.34.151]) > > by inbound104.ourserver.com > > with hMailServer ; Wed, 3 Apr 2013 15:05:01 +0100 > > > > --- > > > > Thanks for your help > > > > N > > > > > ______________________________________________ > Giacom email security by www.messagestream.com > > ---------------------------------------------------------------------------- > -- > Minimize network downtime and maximize team effectiveness. > Reduce network management and security costs.Learn how to hire the most > talented Cisco Certified professionals. Visit the Employer Resources > Portal > http://www.cisco.com/web/learning/employer_resources/index.html > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known > virus in this email! > ******************************************************* > > > > > > ------------------------------------------------------------------------------ > Minimize network downtime and maximize team effectiveness. > Reduce network management and security costs.Learn how to hire > the most talented Cisco Certified professionals. Visit the > Employer Resources Portal > http://www.cisco.com/web/learning/employer_resources/index.html > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ > Minimize network downtime and maximize team effectiveness. > Reduce network management and security costs.Learn how to hire > the most talented Cisco Certified professionals. Visit the > Employer Resources Portal > http://www.cisco.com/web/learning/employer_resources/index.html > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
