The SPF helps other SMTP servers know that your domain is allowed to send out of those IP's, but ASSP will still flag as spoofed, since they're in the list of local domains.
On Thu, Sep 23, 2021 at 7:15 AM <t...@epiinc.com> wrote: > Ken > > Thank you for your detailed list of options here. In fact, I'm doing #4 > already as a work around. > > I can agree if the emails were sent through my local system that I would > then be covered. It might be an option in which I may have to further > explore if I'm unable to come to an acceptable solution. (#1 and #3) > > While I'm using #4, the noSpoofingCheckIP, I still consider this a work > around. The issue here is option opens up all the local domains to > Spoofing whether I need it or not. Maybe if I had the option to narrow the > IP to domain(s) and/or specific email addresses would I feel comfortable > leaving this in place. This is why I'm think the SPF record should already > cover this (at least at the domain level). > > Brian S > > ------------------------------ > *From: *"K Post" <nntp.p...@gmail.com> > *To: *"For Users of ASSP" <assp-user@lists.sourceforge.net> > *Sent: *Wednesday, September 22, 2021 8:06:50 PM > *Subject: *Re: [Assp-user] SpoofedSender flagged when they should not be > > > When receiving mail into ASSP that is FROM another one of your local > domain names from the outside (as I assume the sendgrid IP address you > referenced is) you either need to: > 1) authenticate or > 2) have the sending IP be in acceptAllMail or > 3) have the mail sent through the relayPort and the ip in acceptRelayCon or > 4) have the sending IP be listed in noSpoofingCheckIP or > 5) have the domain listed in the noSpoofingCheckDomain (which I don't > suggest or you'll be susceptible to spoofing from everywhere) > (I believe those are all of the options) > > If you don't do one of the above, ASSP will consider the mail as spoofed. > Having the IP listed in the SPF record for the domain won't help in this > case. > > Hope this helps. > Ken > > > > On Wed, Sep 22, 2021 at 3:03 PM <t...@epiinc.com> wrote: > >> Yes, the domain is listed in the localdomains. >> >> Correct, within the SPF TXT record the domain is referenced to be able to >> sent from the IP address noted in the log. >> >> >> *From: *"K Post" <nntp.p...@gmail.com> >> *To: *"For Users of ASSP" <assp-user@lists.sourceforge.net> >> *Sent: *Wednesday, September 22, 2021 2:39:16 PM >> *Subject: *Re: [Assp-user] SpoofedSender flagged when they should not be >> >> Is SubZeroCompanyStore.com listed in localDomains? >> I don't follow what you mean by domains being "list in the TXT record." >> Are you talking about the SPF TXT record in DNS? >> >> >> On Thu, Sep 16, 2021 at 5:28 PM EPI Tech <t...@epiinc.com> wrote: >> >>> I keep having similar issues show up in my logs which is causing issue >>> in our emails being delivered. This domain and many others like it are >>> list in the TXT record and in testing the TXT correctly formatted. >>> >>> As a workaround I have been using noSpoofingCheckIP to work around this >>> issue, but I need to get this corrected as some of these IP I don't want to >>> globally allow to Spoof the Sender. >>> >>> Any suggestions? Currently running ASSP version 2.6.6 build 21218 >>> >>> Thanks, >>> >>> Brian S >>> >>> >>> Sep-16-21 13:17:16 m1-12636-04808 [Worker_6] [TLS-in] [TLS-out] >>> [SpoofedSender] 149.72.229.238 <customerc...@subzerocompanystore.com> >>> to: supp...@tmpcompany.com [scoring] (No Spoofing Allowed ' >>> customerc...@subzerocompanystore.com' in 'from') >>> Sep-16-21 13:17:16 m1-12636-04808 [Worker_6] [TLS-in] [TLS-out] >>> [SpoofedSender] 149.72.229.238 <customerc...@subzerocompanystore.com> >>> to: supp...@tmpcompany.com [scoring] (No Spoofing Allowed ' >>> customerc...@subzerocompanystore.com' in 'sender') >>> >>> _______________________________________________ >>> Assp-user mailing list >>> Assp-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/assp-user >>> >> >> >> _______________________________________________ >> Assp-user mailing list >> Assp-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-user >> >> _______________________________________________ >> Assp-user mailing list >> Assp-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-user >> > > > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user > > _______________________________________________ > Assp-user mailing list > Assp-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-user >
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
