SMTP Auth Failure address glitch

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

SMTP Auth Failure address glitch

Andrew Macpherson-3
ASSP 2.5.5 - 16366

SSL Auth failures seem to be recording against address 0:0:0:0:0:0:0:0 and the incoming addresses are being looked up against  this pattern, and rejecting for AUTH failures from different addresses.  I don’t quite understand why the addresses are being presented in IPv6 mapped IPv4 format (yes I really am running both stacks, but each on different interfaces)

Anyway the net result is that some users are being rejected despite having

17-01-16 09:40:05 [Worker_3] [SSL-in] ::ffff:62.122.21.101 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 09:43:20 [Worker_3] [SSL-in] ::ffff:170.84.97.125 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 09:45:08 [Worker_6] [SSL-in] ::ffff:178.148.111.1 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 10:10:27 [Worker_7] [SSL-in] ::ffff:182.48.75.68 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 10:35:07 [Worker_4] [SSL-in] ::ffff:190.155.199.60 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0

Andrew Macpherson <[hidden email]>
(Twitter @OA5dotCom)

The Old Church, 22-24 Church St, Milnathort, KY13 9XH, GB
Phone tel:+441577861848 GSM tel:+447899961797

LEGAL CLAIMER:  Any claims made at this point in a message
are completely invalid as they are presented after the information they
attempt to assert rights over has been disclosed without prior caveat





------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: SMTP Auth Failure address glitch

Thomas Eckardt/eck
>ASSP 2.5.5 - 16366

Please switch to the latest development version 2.5.6 ....  if you want to report in this mailing list.

It does'nt matter why your OS/Perl sockets are reporting the IP this way. Other implementations may report the IP in another way.
The next dev. version will report and internaly use the IPv4 part of IPv4-compatible IPv6 address (::0:IPv4) and IPv4-mapped IPv6 address (::FFFF:IPv4)

Until now, this was not done for all checks.

Thomas





Von:        Andrew Macpherson <[hidden email]>
An:        ASSP development mailing list <[hidden email]>
Datum:        21.01.2017 20:00
Betreff:        [Assp-test] SMTP Auth Failure address glitch




ASSP 2.5.5 - 16366

SSL Auth failures seem to be recording against address 0:0:0:0:0:0:0:0 and the incoming addresses are being looked up against  this pattern, and rejecting for AUTH failures from different addresses.  I don’t quite understand why the addresses are being presented in IPv6 mapped IPv4 format (yes I really am running both stacks, but each on different interfaces)

Anyway the net result is that some users are being rejected despite having

17-01-16 09:40:05 [Worker_3] [SSL-in] ::ffff:62.122.21.101 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 09:43:20 [Worker_3] [SSL-in] ::ffff:170.84.97.125 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 09:45:08 [Worker_6] [SSL-in] ::ffff:178.148.111.1 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 10:10:27 [Worker_7] [SSL-in] ::ffff:182.48.75.68 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0
17-01-16 10:35:07 [Worker_4] [SSL-in] ::ffff:190.155.199.60 [SMTP Error] 521 ASSP.OA5.COM does not accept mail - closing transmission - too many previous AUTH errors from 0:0:0:0:0:0:0:0

Andrew Macpherson <[hidden email]>
(Twitter @OA5dotCom)

The Old Church, 22-24 Church St, Milnathort, KY13 9XH, GB
Phone tel:+441577861848 GSM tel:+447899961797

LEGAL CLAIMER:  Any claims made at this point in a message
are completely invalid as they are presented after the information they
attempt to assert rights over has been disclosed without prior caveat





------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test