The output of 'DKIM' is wrong - there was a black domain found in any
sender tag (from: , reply-to: .... ).
This will be fixed in the next relase.
Thomas
Von: Colin <[email protected]>
An: [email protected],
Datum: 16.06.2012 10:35
Betreff: Re: [Assp-test] Antwort: blacklisted domain 'DKIM'
This is an example. Emails from this legitimate IT supplier in the UK
always get blocked by my install of ASSP. I have 60 examples collected
over the last two weeks. I have also checked and there are over 11,300
emails containing the phrase DKIM
X-Assp-Version: 2.2.2(12151) on mail.smtphost.co.uk
X-Assp-Server-TLS: yes
X-Assp-Delay: not delayed (whitelisted); 12 Jun 2012 10:37:36 +0100
X-Assp-Message-Score: 100 (blacklisted domain 'DKIM')
X-Assp-IP-Score: 100 (blacklisted domain 'DKIM')
X-Assp-Whitelisted: Yes
X-Assp-Tag: BlackDomain
X-Assp-ID: mail.smtphost.co.uk m1-93856-09671
X-Assp-Envelope-From: [email protected]
X-Assp-Intended-For: [email protected]
X-Assp-Original-Subject: Accessorise with Westcoast
X-Spam-Status:yes
X-Assp-Spam-Reason: blacklisted domain 'DKIM'
X-Assp-Message-Totalscore: 100
Received: from mta8524.pur3.net ([94.236.85.24] helo=mta8524.pur3.net) by
mail.smtphost.co.uk with SMTP (2.2.2); 12 Jun 2012 10:37:36 +0100
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=ukrs394972;
d=pur3.net;
h=Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:From:Reply-To:To:Date:Message-ID;
bh=qDnGuldX6e33EFO2mLq0ndsnRZw=;
b=e0vZrBkc3kZSoDcHhSXBeODToVaw/kOsTzYm7nSIQyVWGSuqHjvOIHzOPFCfVvZZ3fwQGMLGAin3
tQM9n4YtMnpVwSWqAv1mZdLPYiOA6usvc7QpdzG75FDzOJMmsfTn
Received: from localhost (127.0.0.1) by mta8524.pur3.net id hqs6t81549ol
for <[email protected]>; Tue, 12 Jun 2012 10:36:23 +0100
(envelope-from <[email protected]>)
Subject: Accessorise with Westcoast
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="alternative_e8fdd7febb9516edbb8263eba85635ea"
Content-Transfer-Encoding: 7bit
From: "Westcoast" <[email protected]>
Reply-To: "Westcoast" <[email protected]>
X-MailId: {~B91786242557490729941024540407~}
To: [email protected]
Date: Tue, 12 Jun 2012 10:36:23 +0100
Message-ID: <[email protected]>
On 15/06/2012 06:19, Thomas Eckardt wrote:
> Colin, please post such a header.
>
> Thomas
>
>
>
> Von: Colin<[email protected]>
> An: ASSP development mailing list<[email protected]>,
> Datum: 14.06.2012 23:25
> Betreff: [Assp-test] blacklisted domain 'DKIM'
>
>
>
> Hey there,
>
> I've been meaning to say something about this for a while. I quite
> regularly get messaged blocked where the reason is given as:
>
> blacklisted domain 'DKIM'
>
> Thing is, there is nothing in the blackdomains.txt file that would cause
> DKIM to be blocked at least as far as I can see. It is mostly plain text
> email addresses with a couple of wildcards that don't even come close.
>
> Is there a chance that something in the code that is incorrectly
> detecting the DKIM header as a domain to be blocked?
>
> All the best,
> Colin Waring
>
>
------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond.
Discussions
> will include endpoint security, mobile security and the latest in
malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential,
legally
> privileged and protected in law and are intended solely for the use of
the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
>
>
------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond.
Discussions
> will include endpoint security, mobile security and the latest in
malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>
>
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
