[Declude.JunkMail] IPBYPASS clashes with SPF

Fri, 18 Mar 2005 11:26:10 -0800

Title: Message
Hi,
 
a) I have my SMTP Gateways correctly defined in IPBYPASS, so that Declude can attempt to determine the ultimate sending IP address (for EXTERNAL emails).
 
b) However, the IPBYPASS logic is flawed, in that it does not allow for the fact that email may truly originate from the Gateway itself.
 
If an Email originates from the Gateway, then Declude will only find ONE IP address in the Received Headers (that of the gateway). Although no other IP address is involved, it uses 0.0.0.0 as the IP address - which then fails the SPF test.  (Headers and log files are enclosed.)
 
Solution:
The logic should be corrected, so that Declude remembers the most recent "Gateway IP" before bypassing it.  If not other IP address is found after processing all headers, then the Gateway IP is used.
 
Sample Logic:
1. Access the first Received header
2. determine the IP address from Received header
3. if the IP address from header is in IPBYPASS, save it in the "closest gateway" IP address, then reset "current IP address to 0.0.0.0".
4. if current IP address = 0.0.0.0, look for next Received header, loop to step 2
5. No more received headers, if current IP address = 0.0.0.0, then restore from "closest gateway IP"
 
 
IPBYPASS 63.107.174.32
 
03:18 13:48 SMTPD(226e1b150152b614) [63.107.174.78] connect 63.107.174.32 port 1149
03:18 13:48 SMTPD(226e1b150152b614) [63.107.174.32] EHLO smtp.webhost.hm-software.com
03:18 13:48 SMTPD(226e1b150152b614) [63.107.174.32] MAIL FROM:<[EMAIL PROTECTED]>
03:18 13:48 SMTPD(226e1b150152b614) [63.107.174.32] RCPT TO:<[EMAIL PROTECTED]>
03:18 13:48 SMTPD(226e1b150152b614) [63.107.174.32] D:\IMAIL\spool\D226e1b150152b614.SMD 10199
 
03/18/2005 13:48:18 Q226E1B150152B614 SPFFAIL:8 nNOLEGITCONTENT:-3 CONTENT:7 .  Total weight = 12.
03/18/2005 13:48:18 Q226E1B150152B614 Subject: dollardays.com Users
03/18/2005 13:48:18 Q226E1B150152B614 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]  IP: 0.0.0.0 ID:
03/18/2005 13:48:18 Q226E1B150152B614 Tests failed [weight=12]: SPFFAIL=IGNORE IPNOTINMX=IGNORE SNIFFER=LOG CONTENT=IGNORE WEIGHT10=BOUNCEONLYIFYOUMUST
03/18/2005 13:48:18 Q226E1B150152B614 Action(s) taken for [EMAIL PROTECTED] = IGNORE LOG BOUNCEONLYIFYOUMUST
03/18/2005 13:48:18 Q226E1B150152B614 Cumulative action(s) taken on this email = IGNORE LOG BOUNCEONLYIFYOUMUST
 
Received: from smtp.webhost.hm-software.com [63.107.174.32] by hm-software.com with ESMTP
  (SMTPD32-8.15) id A52E117D004A; Fri, 18 Mar 2005 13:48:18 -0500
Received: from mail pickup service by smtp.webhost.hm-software.com with Microsoft SMTPSVC;
  Fri, 18 Mar 2005 13:48:18 -0500
Reply-To: <[EMAIL PROTECTED]>
From: "Argos Networks" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: dollardays.com Users
Date: Fri, 18 Mar 2005 13:48:18 -0500
Organization: Argos Networks
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft CDO for Windows 2000
Thread-Index: AcUr7KzK2+wET159SVawmepsXE/crg==
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
X-OriginalArrivalTime: 18 Mar 2005 18:48:18.0290 (UTC) FILETIME=[AE164B20:01C52BEC]
X-Declude: Version 2.0.5.43; D226e1b150152b614.SMD from (Private IP) [0.0.0.0]
X-Countries: UNITED STATES->destination
Return-Path: <[EMAIL PROTECTED]>
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 411120980

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.HM-Software.com/

 

<<attachment: HMSoftSmall.jpg>>

Reply via email to