There is a change of behaviour in local senders since 1.9.9(1407X)

 

External authenticated senders now get blocked if they have a different
domain address (not local). This makes sense if "nolocaldomains" is not
enabled (although previously they would still pass).

Eg.

 

39520-01708 [UnknownLocalSender] 202.164.200.197
<chamil...@outsidedomain.com.au> to: mhamil...@localdomain.com.au [blocking]
local sender:chamil...@localdomain.com.au unknown;

 

 

However I am getting unknownlocalsender errors and blocking for local
senders "sometimes".

 

Eg..

 

Mar-19-14 08:27:08 [Authentication] 192.168.0.63 info: authentication -
login is used;

Mar-19-14 08:27:08 [Authentication] 192.168.0.63 info: authentication
(LOGIN) realms - user:t...@localdomain.com.au;

Mar-19-14 08:27:08 192.168.0.63 authenticated;

Mar-19-14 08:27:08 39517-00559 [UnknownLocalSender] 192.168.0.63
<t...@localdomain.com.au> to: tran...@localdomain.com.au [blocking] local
sender:t...@localdomain.com.au unknown;

 

I thought maybe an issue with DoVRFY (t...@localdomain.com.au is an alias)
but in trying to replicate I could send an email internally as follows.

 

Mar-19-14 16:50:04 39520-00003 [LocalOK] 192.168.0.86 <t...@abc.com.au> to:
jca...@localdomain.com.au local - 192.168.0.86 in acceptAllMail - [Test] ->
notspam/39520-00003.eml;

 

This should have failed? (Note: DoVRFY is enabled)

 

I also found items in the log from older versions that were determined not
local even though they have valid email accounts on the MTA.

 

Eg..

Mar-06-14 08:47:44 39405-01163 [UnknownLocalSender] 192.168.0.84
<jmar...@localdomain.com.au> to: ds...@localdomain.com.au [monitoring] local
sender address jmar...@localdomain.com.au unknown;

Mar-06-14 09:37:25 39405-01246 [UnknownLocalSender] 192.168.0.1
<plonead...@localdomain.com.au> to: pgri...@localdomain.com.au [monitoring]
local sender address plonead...@localdomain.com.au unknown;

Mar-06-14 09:53:40 39406-01263 [UnknownLocalSender] 192.168.0.54
<czh...@localdomain.com.au> to: i...@cameraparadise.com [monitoring] local
sender address czh...@localdomain.com.au unknown;

Mar-06-14 11:12:31 39406-01486 [UnknownLocalSender] 192.168.0.54
<czh...@localdomain.com.au> to: tra...@masfreight.com.au [monitoring] local
sender address czh...@localdomain.com.au unknown;

Mar-06-14 11:22:35 39406-01535 [UnknownLocalSender] 192.168.0.44
<mmccrud...@localdomain.com.au> to: ds...@localdomain.com.au [monitoring]
local sender address mmccrud...@localdomain.com.au unknown;

 

They are all newish accounts and do not appear in the SMTP-VRFY Found Cache
(Nothing appears in the not found cache).

 

@anotherlocaldomain.net.au[1]1384729809 CACHE

@localdomain.com.au[1]1384760519 CACHE

abo...@localdomain.com.au[1]1395200515

administra...@localdomain.com.au[1]1392881253

bc...@localdomain.com.au[1]1395176904

data.protector.expr...@localdomain.com.au[1]1331163563

dn...@localdomain.com.au[1]1395203820

ds...@localdomain.com.au[1]1395208600

em...@anotherlocaldomain.net.au[1]1395197786

gg...@localdomain.com.au[1]1395211359

glit...@localdomain.com.au[1]1395199508

gpet...@localdomain.com.au[1]1395211046

hev...@localdomain.com.au[1]1395209333

jca...@localdomain.com.au[1]1395208138

jkaste...@localdomain.com.au[1]1395213033

jl...@localdomain.com.au[1]1394584643

jstu...@localdomain.com.au[1]1331604524

jtru...@localdomain.com.au[1]1395209055

kngu...@localdomain.com.au[1]1331788951

lborr...@localdomain.com.au[1]1395204688

mcar...@localdomain.com.au[1]1395097077

mgee...@localdomain.com.au[1]1395193987

mhamil...@localdomain.com.au[1]1395205186

mkinuk...@localdomain.com.au[1]1395182245

pgri...@localdomain.com.au[1]1395112357

rclifford-wo...@localdomain.com.au[1]1395202784

rdu...@localdomain.com.au[1]1395215143

rhis...@localdomain.com.au[1]1395196488

shadowprot...@localdomain.com.au[1]1395162533

sruss...@localdomain.com.au[1]1395200835

tran...@localdomain.com.au[1]1395183137

wca...@localdomain.com.au[1]1324502481

webform...@localdomain.com.au[1]1394612852

webform...@localdomain.com.au[1]1393547893

webform...@localdomain.com.au[1]1395100595

xm...@localdomain.com.au[1]1395162274

 

The above list looks like it has not updated in quite some time.

 

 

 

Any thoughts,

 

John Calvi

 

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to