Possible bug spoofed To not being flagged

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Possible bug spoofed To not being flagged

William L. Thomson Jr.-4
Just wanted to get others feedback before I report this as a bug. This
scenario is not me sending email as me. It is if someone is spoofing my
address.

Should ASSP be catching the following

X-Assp-Envelope-From: [hidden email]
X-Assp-Intended-For: [hidden email]

From: "William L. Thomson Jr." <[hidden email]>
To: [hidden email]

These seem to make it through. I understand ASSP see's the from address and
processes it from there. Should it not catch that the To address is spoofed?

I might have a setting off vs being a bug, thus asking. Thanks!

--
William L. Thomson Jr.


------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Possible bug spoofed To not being flagged

William L. Thomson Jr.-4
On Monday, December 5, 2016 2:17:37 PM EST William L. Thomson Jr. wrote:

> Just wanted to get others feedback before I report this as a bug. This
> scenario is not me sending email as me. It is if someone is spoofing my
> address.
>
> Should ASSP be catching the following
>
> X-Assp-Envelope-From: [hidden email]
> X-Assp-Intended-For: [hidden email]
>
> From: "William L. Thomson Jr." <[hidden email]>
> To: [hidden email]

Typo there, it was supposed to be
From: "William L. Thomson Jr." <[hidden email]>

I think you get the idea either way.

--
William L. Thomson Jr.


------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Possible bug spoofed To not being flagged

Thomas Eckardt/eck
In reply to this post by William L. Thomson Jr.-4
You need to disallow spoofing in the configuration.

Thomas





Von:        "William L. Thomson Jr." <[hidden email]>
An:        assp-user <[hidden email]>
Datum:        05.12.2016 20:46
Betreff:        [Assp-user] Possible bug spoofed To not being flagged




Just wanted to get others feedback before I report this as a bug. This
scenario is not me sending email as me. It is if someone is spoofing my
address.

Should ASSP be catching the following

X-Assp-Envelope-From: [hidden email]
X-Assp-Intended-For: [hidden email]

From: "William L. Thomson Jr." <[hidden email]>
To: [hidden email]

These seem to make it through. I understand ASSP see's the from address and
processes it from there. Should it not catch that the To address is spoofed?

I might have a setting off vs being a bug, thus asking. Thanks!

--
William L. Thomson Jr.


------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: Possible bug spoofed To not being flagged

William L. Thomson Jr.-4
On Tuesday, December 6, 2016 12:03:12 PM EST Thomas Eckardt wrote:
> You need to disallow spoofing in the configuration.

For inbound messages? I thought I had that set. I will look to see if
something is not. I realized I had messed up my SPF records but those are
corrected now.

I was running the email through the mail analyzer and seemed it was passing
SPF which was odd. It wasn't really flagging anything else. Thought it was
pretty strange.

--
William L. Thomson Jr.


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user