That's what I thought too, but I do not have that address or domain whitelisted. The only entry I have is that '@UPS.COM' is listed in the strictspf.txt file.
----- Original Message ----- From: "James Moe via Assp-test" <assp-test@lists.sourceforge.net> To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Cc: "James Moe" <ji...@sohnen-moe.com> Sent: Monday, November 2, 2020 1:16:23 PM Subject: Re: [Assp-test] Forged UPS messages that made it through ASSP On 11/2/20 10:39 AM, EPI Tech wrote: > 20-10-22.maillog.txt:Oct-22-20 07:13:00 m1-65179-08821 [Worker_2] [TLS-out] > 212.171.45.199 <comfort...@njppsappsagent1.ups.com> to: m_sa...@epiinc.com > Whitelisted sender address: upsbillingcen...@ups.com for recipient > m_sa...@epiinc.com > The sender's address, upsbillingcen...@ups.com, is Whitelisted. For a domain like ups.com, the whitelisting should be more specific than just "@ups.com." It can be a bit annoying when large companies keep changing their email (sub-)domain. In our domains whitelist we have several companies with 4 or more different email addresses. The curse of success in this case. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
