Menu
▾
▴
[Assp-user] forged helo strange error and problem
|
From: PlusPlus I. S. L. <plu...@gm...> - 2015-07-24 12:56:52
|
Im having a very odd issue....i have one account in the server which is rejecting any email with the forged helo error. I have tested sending from one of my other servers to this address...in the logs usually the ip is the sender server ip, but note in the logs below even when i send from my other server which ip is not the one listed below it showing as the sender ip is the same ip as the recipient server ip? Even if i send from gmail is showing the same ip..and now that i have disabled forged helo blocking is repeating many times the logs...the logs below (the last ones) is only one email test i sent...and the ip listed there (64.27.xx.xx) is the recipient server where i have the te...@lo... address.... this is when i send from gmail..... Jul-24-15 01:57:47 id-03067-12797 [Worker_2] [NoProcessing] 64.27.xx.xx <us...@gm...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 01:57:47 id-03067-12797 [Worker_2] 64.27.xx.xx <us...@gm...> to: te...@lo... DKIM-Signature found Jul-24-15 01:57:47 id-03067-12797 [Worker_2] 64.27.xx.xx <us...@gm...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 01:57:47 id-03067-12797 [Worker_2] [MessageOK] 64.27.xx.xx <us...@gm...> to: te...@lo... message ok [test] Jul-24-15 01:57:47 id-03067-05662 [Worker_4] 64.27.xx.xx <us...@gm...> info: found message size announcement: 10.81 kByte Jul-24-15 01:57:48 id-03067-05662 [Worker_4] [NoProcessing] 64.27.xx.xx <us...@gm...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 01:57:48 id-03067-05662 [Worker_4] 64.27.xx.xx <us...@gm...> to: te...@lo... DKIM-Signature found Jul-24-15 01:57:48 id-03067-05662 [Worker_4] 64.27.xx.xx <us...@gm...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 01:57:48 id-03067-05662 [Worker_4] [MessageOK] 64.27.xx.xx <us...@gm...> to: te...@lo... message ok [test] Jul-24-15 01:57:48 id-03068-07320 [Worker_2] 64.27.xx.xx <us...@gm...> info: found message size announcement: 12.29 kByte Jul-24-15 01:57:48 id-03068-07320 [Worker_2] [NoProcessing] 64.27.xx.xx <us...@gm...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 01:57:48 id-03068-07320 [Worker_2] 64.27.xx.xx <us...@gm...> to: te...@lo... DKIM-Signature found Jul-24-15 01:57:48 id-03068-07320 [Worker_2] 64.27.xx.xx <us...@gm...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 01:57:48 id-03068-07320 [Worker_2] [MessageOK] 64.27.xx.xx <us...@gm...> to: te...@lo... message ok [test] Jul-24-15 01:57:48 id-03068-06540 [Worker_2] 64.27.xx.xx <us...@gm...> info: found message size announcement: 13.76 kByte Do you see the ip? is the server ip....instead the gmail ip this is a test to another address in the same server also sent a test from gmail....as you can see the ip listed is the gmail one as should be...not the recipient server ip Jul-24-15 02:18:30 id-04310-09436 [Worker_1] 209.85.220.174 <us...@gm...> info: found message size announcement: 1.69 kByte Jul-24-15 02:18:30 id-04310-09436 [Worker_1] 209.85.220.174 <us...@gm...> to: my...@do... the low/limit SpamLover-Score for this mail is set to 40/40 because recipient my...@do... is in pbSpamLovers Jul-24-15 02:18:30 id-04310-09436 [Worker_1] [NoProcessing] 209.85.220.174 <us...@gm...> to: my...@do... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:18:30 id-04310-09436 [Worker_1] 209.85.220.174 <us...@gm...> to: my...@do... DKIM-Signature found Jul-24-15 02:18:30 id-04310-09436 [Worker_1] [MessageOK] 209.85.220.174 <us...@gm...> to: my...@do... message ok - (noProcessingIPs) - [test] here are more logs....the oth...@my... address is in another server so that ip shouldnt be that...the ip is where te...@lo... is hosted.... - Jul-24-15 02:04:16 id-03456-13937 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 10.64 kByte Jul-24-15 02:04:16 id-03456-13937 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:17 id-03456-13937 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:17 id-03456-13937 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:17 id-03457-09958 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 12.13 kByte Jul-24-15 02:04:17 id-03457-09958 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:17 id-03457-09958 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:17 id-03457-09958 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:17 id-03457-06418 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 13.63 kByte Jul-24-15 02:04:17 id-03457-06418 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:17 id-03457-06418 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:17 id-03457-06418 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:17 id-03457-01540 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 15.12 kByte Jul-24-15 02:04:18 id-03457-01540 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:18 id-03457-01540 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:18 id-03457-01540 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:18 id-03458-00669 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 16.62 kByte Jul-24-15 02:04:18 id-03458-00669 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:18 id-03458-00669 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:18 id-03458-00669 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:18 id-03458-13464 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 18.12 kByte Jul-24-15 02:04:18 id-03458-13464 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:18 id-03458-13464 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:18 id-03458-13464 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:18 id-03458-08810 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 19.63 kByte Jul-24-15 02:04:19 id-03458-08810 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:19 id-03458-08810 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:19 id-03458-08810 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:19 id-03459-08173 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 21.13 kByte Jul-24-15 02:04:19 id-03459-08173 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:19 id-03459-08173 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:19 id-03459-08173 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] Jul-24-15 02:04:19 id-03459-08741 [Worker_5] 64.27.xx.xx <oth...@my...> info: found message size announcement: 22.64 kByte Jul-24-15 02:04:19 id-03459-08741 [Worker_5] [NoProcessing] 64.27.xx.xx <oth...@my...> to: te...@lo... message proxied without processing (except checks enabled for noprocessing mails) Jul-24-15 02:04:20 id-03459-08741 [Worker_5] 64.27.xx.xx <oth...@my...> to: te...@lo... Message-Score: added 10 for BombSuspicious: 'X-Assp-ID', total score for this message is now 10 Jul-24-15 02:04:20 id-03459-08741 [Worker_5] [MessageOK] 64.27.xx.xx <oth...@my...> to: te...@lo... message ok [test] |
