>> Received: from mout3.freenet.de (localhost [127.0.0.1]) >> by mymxserver.com (Postfix) with ESMTP id 9868FB16D96 >> for <u...@myvirtualdomain.com>; Tue, 28 Jul 2009 14:32:46 -0400 (EDT)
> I am beginning to suspect that it's possible to spoof localhost to get > around assp. Anyone have any thoughts? I'm sure that incoming port > 10024 and 1025 are blocked from the outside, so perhaps one can > successfully spoof the sending server's IP to be localhost (as above, > perhaps), so that assp simply passes the mail to the SMTP server or > amavisd. looking at your email it sounds like your ASSP is running on the same box on which your SMTP server runs; in such a case, since ASSP is a proxy, the above is normal behaviour; ASSP will be listening on port 25 and will see the real sender IP, it will then proxy the connection toward the SMTP server and the latter will always see 127.0.0.1 as the sender IP address; so I don't think it's a "spoofing" issue at all; then, to find out why the message "came through" you'll have to look at the ASSP logs finding the entries related to that session (from start to end) and looking at the reason why ASSP considered the message as being "ok" ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
