strivoli 1 Posted October 14, 2020 Share Posted October 14, 2020 I've included domain.com in our Whitelist (Antispam protection/Approved Senders list/domain.com) but I still get: 2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,0,192.168.0.106:25,41.226.16.66:58260,+,, 2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,1,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions 2020-10-13T12:07:33.713Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,2,192.168.0.106:25,41.226.16.66:58260,>,220 posta.mydomain.com, 2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,3,192.168.0.106:25,41.226.16.66:58260,<,HELO host, 2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,4,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions 2020-10-13T12:07:33.775Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,5,192.168.0.106:25,41.226.16.66:58260,>,250 SRV-A006.mydomain.com Hello [IP], 2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,6,192.168.0.106:25,41.226.16.66:58260,<,MAIL FROM:<user@domain.com>, 2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,7,192.168.0.106:25,41.226.16.66:58260,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions 2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,8,192.168.0.106:25,41.226.16.66:58260,*,08D864A25D394BA1;2020-10-13T12:07:33.713Z;1,receiving message 2020-10-13T12:07:33.822Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,9,192.168.0.106:25,41.226.16.66:58260,>,250 2.1.0 Sender OK, 2020-10-13T12:07:33.931Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,10,192.168.0.106:25,41.226.16.66:58260,<,RCPT TO:<user1@mydomain.com>, 2020-10-13T12:07:33.931Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,11,192.168.0.106:25,41.226.16.66:58260,>,250 2.1.5 Recipient OK, 2020-10-13T12:07:33.994Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,12,192.168.0.106:25,41.226.16.66:58260,<,DATA, 2020-10-13T12:07:33.994Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,13,192.168.0.106:25,41.226.16.66:58260,>,354 Start mail input; end with <CRLF>.<CRLF>, 2020-10-13T12:07:34.088Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,14,192.168.0.106:25,41.226.16.66:58260,*,,Ignored X-OriginatorOrg header value 'domain.com' because session capabilities do not allow it 2020-10-13T12:07:34.103Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,15,192.168.0.106:25,41.226.16.66:58260,*,,Proxy destination(s) obtained from OnProxyInboundMessage event 2020-10-13T12:07:35.541Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,16,192.168.0.106:25,41.226.16.66:58260,*,Tarpit for '0.00:00:05' due to '550 5.7.1 SPF check failed', 2020-10-13T12:07:40.556Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,17,192.168.0.106:25,41.226.16.66:58260,>,550 5.7.1 SPF check failed, 2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,18,192.168.0.106:25,41.226.16.66:58260,<,QUIT, 2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,19,192.168.0.106:25,41.226.16.66:58260,>,221 2.0.0 Service closing transmission channel, 2020-10-13T12:07:40.603Z,SRV-A006\Default Frontend SRV-A006,08D864A25D394BA1,20,192.168.0.106:25,41.226.16.66:58260,-,,Local What am I missing? Link to comment Share on other sites More sharing options...
ESET Staff M.K. 17 Posted October 16, 2020 ESET Staff Share Posted October 16, 2020 You need to use one of the IP & Domain-to-IP whitelists, for example Greylisting and SPF -> IP whitelist Greylisting and SPF -> Domain to IP whitelist Link to comment Share on other sites More sharing options...
Recommended Posts