That's what I thought too, but I do not have that address or domain whitelisted. The only entry I have is that '@UPS.COM' is listed in the strictspf.txt file.
----- Original Message ----- From: "James Moe via Assp-test" <[email protected]> To: "ASSP development mailing list" <[email protected]> Cc: "James Moe" <[email protected]> Sent: Monday, November 2, 2020 1:16:23 PM Subject: Re: [Assp-test] Forged UPS messages that made it through ASSP On 11/2/20 10:39 AM, EPI Tech wrote: > 20-10-22.maillog.txt:Oct-22-20 07:13:00 m1-65179-08821 [Worker_2] [TLS-out] > 212.171.45.199 <[email protected]> to: [email protected] > Whitelisted sender address: [email protected] for recipient > [email protected] > The sender's address, [email protected], is Whitelisted. For a domain like ups.com, the whitelisting should be more specific than just "@ups.com." It can be a bit annoying when large companies keep changing their email (sub-)domain. In our domains whitelist we have several companies with 4 or more different email addresses. The curse of success in this case. -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 Think. _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
