OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: "Dunce Moment" as regards to spoofing email headers (spam)

From: Ronald MacDonald (ronaldrmacd.com)
Date: Mon Dec 01 2008 - 16:33:09 CST


On 01/12/2008, Ronald MacDonald <ronaldrmacd.com> wrote:
> On 01/12/2008, postfixbitfreak.org <postfixbitfreak.org> wrote:
> > Ronald MacDonald wrote:
> ...
>
> > > However, in one of those "crap, what do I do now" moments, I'm
> > > confuzzled as to how to get Postfix to realise that the mail *should*
> > > be checked, since it's coming in from outside the network.
> > >
> > > Any ideas as to what might be the best way to fix this?
> > >
> >
> > Thank you for the postconf -n output. Please also provide logs of such
> > email bypassing your content filter. We can't help you trace the email and
> > find the configuration error without them.
>
>
> Of course! I'm sorry.
>
<cut>

Ah, umm, my bad. Having noticed that magic word "whitelist" in the
logs, after posting to here, I noticed the user had added themselves
to their white list.

And you wonder why they then complain about spam "from themselves"?

Hhmph.

Regards,
Ronald.

[--for the record, I did a find+replace on the logs to anon the user :) heh ]

--
Ronald MacDonald
http://www.rmacd.com/
0777 235 1655