[ctw] Re: ForgedHELO

  • From: Tom Shaw <tshaw@xxxxxxxx>
  • To: ctw@xxxxxxxxxxxxx
  • Date: Thu, 9 Jul 2009 18:17:42 -0400

Just got back. Let me look.

At 9:38 PM -0300 7/8/09, IBS Ltd. wrote:
Using ASSP 1.5.1.2
Localdomains populated

I have searched through the list - not finding an answer... I am obviously missing something.
<//www.freelists.org/post/ctw/Forged-Helos-Blocked-Now-invalid-local-sender>
- using the above my settings are the same as Toms.

All hosts that connect are connecting as Forged -

Sample from log below: test from hotmail.

Jul-8-09 21:13:52 [ForgedHELO][alltestmode] 65.55.90.15 <ibsltd@xxxxxxxxxxx> to: info@xxxxxx
 [spam found] and passing because alltestmode, otherwise blocked
(ForgedHELO:'snt0-omc1-s4.snt0.hotmail.com') ->
  /applications/assp/spam/6456.eml


Received: from snt0-omc1-s4.snt0.hotmail.com ([65.55.90.15] helo=snt0-omc1-s4.snt0.hotmail.com)
        with IPv4:25 by mail.XXX.ca; 8 Jul 2009 21:13:51 -0300
Received: from SNT102-W11 ([65.55.90.9]) by snt0-omc1-s4.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
         Wed, 8 Jul 2009 17:08:52 -0700
Message-ID: <SNT102-W119ED061A9060A05FA657CCB260@xxxxxxx>
Return-Path: XXX@xxxxxxxxxxx
Content-Type: multipart/alternative;
        boundary="_42c7b169-acdf-4780-a33a-bba737de351e_"
X-Originating-IP: [0.0.0.0]
From: XXX <XXX@xxxxxxxxxxx>
To: "info@xxxxxx" <info@xxxxxx>
Subject: test
Date: Wed, 8 Jul 2009 21:38:51 -0200
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Jul 2009 00:08:52.0206 (UTC) FILETIME=[70F230E0:01CA0029]

--_42c7b169-acdf-4780-a33a-bba737de351e_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Any suggestions?

--Gary
Circle The Wagons
manage: //www.freelists.org/list/ctwpost: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq


--
Tom Shaw - Chief Engineer, OITC
<tshaw at oitc.com>, http://www.oitc.com/ local wx: http://www.oitc.com/weather
US Phone Numbers: 321-984-3714, 321-729-6258(fax), 321-258-2475(cell/voice mail,pager)
Text Paging: http://www.oitc.com/Pager/sendmessage.html
AIM/iChat: trshaw@xxxxxxx

Fish more and Live longer
Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts: