OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: 127.0.0.1 (and more) listed in Spamcop, how to avoid?

From: Alain Fauconnet (alainait.ac.th)
Date: Wed Dec 03 2003 - 00:05:21 CST


On Wed, Dec 03, 2003 at 06:56:30AM +0100, Ralf Hildebrandt wrote:
> * Alain Fauconnet <alainait.ac.th>:
>
> > Wait, this doesn't make sense, right? permit_mynetworks checks only
> > against the IP address of the sender and not the IP addresses
> > appearing in the 'Received:' headers, right?. That's a sure good
> > thing, if not it'd be easy to fake headers to let any mail server
> > relay spam!
>
> How exactly do you use spamcop? In Postfix or in
> amavisd-new/spamassassin?

Both. But obviously this discussion was only about its usage in
Postfix (talking about bounces and settings of Postfix...)

I have a definite answer now.

Incidentally I'll have to check if SA checks _any_ address it sees in
the 'Received:' headers, or sanitizes them (such as removing
loopback and RFC1918 address). But this is off-topic for the Postfix
list.

Greets,
_Alain_