[ctw] Re: ForgedHELO

  • From: Tom Shaw <tshaw@xxxxxxxx>
  • To: ctw@xxxxxxxxxxxxx
  • Date: Thu, 9 Jul 2009 18:23:35 -0400

I am about to release 1.5.1.3 so I do not have the exact same config as befor

Do you have DoFakedUseLocalDomain set or do you use DoFakedUseLocalDomain?

At 9:38 PM -0300 7/8/09, IBS Ltd. wrote:
Using ASSP 1.5.1.2
Localdomains populated

I have searched through the list - not finding an answer... I am obviously missing something.
<//www.freelists.org/post/ctw/Forged-Helos-Blocked-Now-invalid-local-sender>
- using the above my settings are the same as Toms.

All hosts that connect are connecting as Forged -

Sample from log below: test from hotmail.

Jul-8-09 21:13:52 [ForgedHELO][alltestmode] 65.55.90.15 <ibsltd@xxxxxxxxxxx> to: info@xxxxxx
 [spam found] and passing because alltestmode, otherwise blocked
(ForgedHELO:'snt0-omc1-s4.snt0.hotmail.com') ->
  /applications/assp/spam/6456.eml


Received: from snt0-omc1-s4.snt0.hotmail.com ([65.55.90.15] helo=snt0-omc1-s4.snt0.hotmail.com)
        with IPv4:25 by mail.XXX.ca; 8 Jul 2009 21:13:51 -0300
Received: from SNT102-W11 ([65.55.90.9]) by snt0-omc1-s4.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
         Wed, 8 Jul 2009 17:08:52 -0700
Message-ID: <SNT102-W119ED061A9060A05FA657CCB260@xxxxxxx>
Return-Path: XXX@xxxxxxxxxxx
Content-Type: multipart/alternative;
        boundary="_42c7b169-acdf-4780-a33a-bba737de351e_"
X-Originating-IP: [0.0.0.0]
From: XXX <XXX@xxxxxxxxxxx>
To: "info@xxxxxx" <info@xxxxxx>
Subject: test
Date: Wed, 8 Jul 2009 21:38:51 -0200
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Jul 2009 00:08:52.0206 (UTC) FILETIME=[70F230E0:01CA0029]

--_42c7b169-acdf-4780-a33a-bba737de351e_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Any suggestions?

--Gary
Circle The Wagons
manage: //www.freelists.org/list/ctwpost: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq


Circle The Wagons
manage: //www.freelists.org/list/ctw post: mailto:ctw@xxxxxxxxxxxxx
unsubscribe: mailto:ctw-request@xxxxxxxxxxxxx?subject=unsubscribe
search: //www.freelists.org/archives/ctw
faq: //www.freelists.org/wiki/the_faq

Other related posts: