Re: [Assp-test] Spoofing

2013-08-27 Thread Doug Lytle
Tim Evans wrote: Neither one of these is in my local domains ...Tim I'd suggest searching on one of those addresses in the ASSP 'View Mailog Tail' option. Once it's highlighted, you can click on the entry and have option to act on it. Also, paste the address into the White/Redlist/Tuplets

Re: [Assp-test] Spoofing

2013-08-27 Thread Tim Evans
that, I don't see anything in common. ...Tim -Original Message- From: Doug Lytle [mailto:supp...@drdos.info] Sent: Tuesday, August 27, 2013 2:30 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing Tim Evans wrote: Neither one of these is in my local domains ...Tim I'd

Re: [Assp-test] Spoofing

2013-08-27 Thread Doug Lytle
Aug-26-13 11:12:58 40778-13666 [Worker_1] [InvalidLocalSender] 8.31.233.118 xx...@sasco.com [spam found] Spoofing Sender in Local Domain This would indicate that the domain(s) in question is/are listed in your Local Domains config file. Doug

Re: [Assp-test] Spoofing

2013-08-27 Thread Tim Evans
But they are not. That is why I am confused. ...Tim -Original Message- From: Doug Lytle [mailto:supp...@drdos.info] Sent: Tuesday, August 27, 2013 7:32 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing Aug-26-13 11:12:58 40778-13666 [Worker_1] [InvalidLocalSender

Re: [Assp-test] Spoofing

2013-08-27 Thread Doug Lytle
But they are not. That is why I am confused. Maybe it's a bug, just for the heck of it, put 13236 into place. Doug -- Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central

Re: [Assp-test] Spoofing

2013-08-27 Thread Tim Evans
mailing list Subject: Re: [Assp-test] Spoofing But they are not. That is why I am confused. Maybe it's a bug, just for the heck of it, put 13236 into place. Doug -- Introducing Performance Central, a new site from

Re: [Assp-test] Spoofing

2013-08-27 Thread Jeremiah Goode
...@drdos.info] Sent: Tuesday, August 27, 2013 8:32 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing But they are not. That is why I am confused. Maybe it's a bug, just for the heck of it, put 13236 into place. Doug

Re: [Assp-test] Spoofing

2013-08-27 Thread Tim Evans
[mailto:sysadmr...@gmail.com] Sent: Tuesday, August 27, 2013 10:24 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing I'm still on 1.99, but have had a similar issue in the past. Check your LDAPcrossCheckInternval Show Found Cache. We do LDAP lookups against our AD and I had

Re: [Assp-test] Spoofing

2013-08-27 Thread Jeremiah Goode
LDAP lookups for spoofing checks (only use localDomains). ...Tim -Original Message- From: Jeremiah Goode [mailto:sysadmr...@gmail.com] Sent: Tuesday, August 27, 2013 10:24 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing I'm still on 1.99, but have had

Re: [Assp-test] Spoofing

2013-08-27 Thread Tim Evans
Sweet, thanks! ...Tim -Original Message- From: Jeremiah Goode [mailto:sysadmr...@gmail.com] Sent: Tuesday, August 27, 2013 10:43 AM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing Let me save you a day or two of work :) Here's my LDAP Filter for Local Addresses

[Assp-test] Spoofing

2013-08-26 Thread Tim Evans
Over the weekend, I upgraded to ASSP version 2.3.3(13217) from one of the more recent 1.99 versions, running on Perl 5.14 on Windows 2008R2. There must be something I don't understand about spoofing, so hopefully someone here can explain it to me. On upgrading to one of the recent 1.99 versions

Re: [Assp-test] Spoofing

2013-08-26 Thread Doug Lytle
Tim Evans wrote: What am I missing? ...Tim Logs would be useful. Doug -- Ben Franklin quote: Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety.

Re: [Assp-test] Spoofing

2013-08-26 Thread Tim Evans
Lytle [mailto:supp...@drdos.info] Sent: Monday, August 26, 2013 3:13 PM To: ASSP development mailing list Subject: Re: [Assp-test] Spoofing Tim Evans wrote: What am I missing? ...Tim Logs would be useful. Doug -- Ben Franklin quote: Those who would give up Essential Liberty to purchase