Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 0 subscribers
  • Views 6451 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Anti-Spam Filtering Test at www.dnsstuff.com

Ben2012

Hi,

I am trying out the Antispam Filtering test available at www.dnsstuff.com at my sophos email appliance does not block the test which mean failed.

Does anyone know of any special settings in the Sophos appliance I can set to pass the test ? I tried switching on a few choices like perimeter protection and the test email still gets in.

Any advice would be appreicated.

Thanks

Ben

:35967


This thread was automatically locked due to age.
  • 0

    Hi Ben,

    Out of interest, is this just to test a new appliance?  Let me know if you're having any problems with spam.

    The DNSStuff test seems to work by adding a 'Received' chain header with the IP 127.0.0.2 to the message.  For our software this wouldn't actually trigger.

    1)  Our perimeter IP reputation checks (Configuration | Policy | Filtering Options) only scan either the connecting IP or the First Unknown IP in the headers.  In both cases that would be a legitimate IP address (DNSstuffs server)

    This is by design because we only want to scan the actual sending server.

    2)  After the message has been received our Spam rules won't look up IP addresses on internal/lookpack ranges.  We're only interested in external IP address ranges.

    There are ways you could block the mesage (eg.  A policy to check the headers for this IP).  But for a better way of testing the spam rules I'd use GTUBE:  http://en.wikipedia.org/wiki/GTUBE

    Thanks,

    Tom.

    :36003
Unfiltered HTML