On 03/11/2014 09:57 AM, Scot Needy wrote:
NOTE: All sender domains and IP’s have been replaced with a unique name.


CHKUSER accepted sender: from<[email protected]::>  remote 
<na01-by2-obe.outbound.protection.outlook.com:unknown:10.189.254.17> rcpt <> : sender 
accepted
spamdyke[8804]: DENIED_OTHER from:[email protected]  
to:[email protected]  origin_ip: 10.189.254.17 origin_rdns: (unknown) auth: 
(unknown) encryption: TLS reason: 
550_See_http://spf.pobox.com/why.html?sender=Joe-Customer%40mydomain.com&ip=10.189.254.17&receiver=mail-01.mydomain.com_(#5.7.1)

CHKUSER accepted sender: from<[email protected]::>  remote 
<na01-bn1-obe.outbound.protection.outlook.com:unknown:10.189.254.17> rcpt <> : sender 
accepted
spamdyke[16794]: DENIED_OTHER from:[email protected]  to:[email protected] 
 origin_ip: 10.189.254.17 origin_rdns: (unknown) auth: (unknown) encryption: TLS 
reason: 
550_See_http://spf.pobox.com/why.html?sender=Joe-Customer%40mydomain.com&ip=10.189.254.17&receiver=mail-01.mydomain.com_(#5.7.1)

CHKUSER accepted sender: from<[email protected]::>  remote 
<na01-bn1-obe.outbound.protection.outlook.com:unknown:10.189.254.17> rcpt <> : sender 
accepted
spamdyke[31470]: DENIED_OTHER from:[email protected]  
to:[email protected]  origin_ip: 10.189.254.17 origin_rdns: (unknown) auth: 
(unknown) encryption: TLS reason: 
550_See_http://spf.pobox.com/why.html?sender=Joe-Customer%40mydomain.com&ip=10.189.254.17&receiver=mail-01.mydomain.com_(#5.7.1)



Looks to me as though there may be a firewall-type device on your perimeter which is doing more than simply NAT. The origin_ip is typically the address of the sending host, which would be public. This holds true even when QMT is behind a NAT'ing firewall (I typically do this).

Is outlook.com the only domain you have messages coming from which show this 10. address?

Is there some sort of VPN going on here?

What device is sitting on the immediate outside of QMT?

--
-Eric 'shubes'


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to