Non-local email bypassing global filter?

bladewolf55

posted May 15 '09 at 9:29 pm

It took me a few days to get back to everyone. Here's what I have found out.

First, the "Suppress validation of 'From' field..." option does affect whether the filters are applied. As an experiment, I enabled suppression, and no longer received notifications of invalid addresses. Instead, notification was skipped and my filter deleted the email, as shown below.

Fri 15, 12:22:24: Job MG00003B: sender address 'charlesnn@softwaremeadows.com' is invalid
* Job killed by filtering rule.

To prove it, I disabled only that setting, and began receiving notifications again.

Fri 15, 13:56:45: Job MG00004F: sender address 'charlesnn@softwaremeadows.com' is invalid
Fri 15, 13:56:56: Job MG000051: from <> (local)
 * Recipient <charlesnn@softwaremeadows.com> unknown
Fri 15, 13:56:56: Job MG000051: Processing failed deliveries and generating notifications
 Mail Delivery System <> - Notification discarded - potential loop.
Fri 15, 13:57:07: Job MG000053: from postmaster@flattland.com (local)
 To: charles (local) -OK

With that said, based on Thomas' advice, I'm going to

Disable "Suppress validation of 'From' field...", which is the default

Disable "Accept mail for invalid local addresses", which is also the default. I had it enabled because, at one time, I accepted any email to the domain.

Thanks for the help. If I run into trouble, I'll post again.

Charles

It took me a few days to get back to everyone.&nbsp; Here's what I have found out. &nbsp;First, the "Suppress validation of 'From' field..." option does affect whether the&nbsp; filters are applied.&nbsp; As an experiment, I enabled suppression, and no longer received notifications of invalid addresses.&nbsp; Instead, notification was skipped and my filter deleted the email, as shown below. <code></code>Fri 15, 12:22:24: Job MG00003B: sender address 'charlesnn@softwaremeadows.com' is invalid &nbsp;&nbsp; * Job killed by filtering rule. &nbsp;To prove it, I disabled only that setting, and began receiving notifications again. <code></code>Fri 15, 13:56:45: Job MG00004F: sender address 'charlesnn@softwaremeadows.com' is invalid Fri 15, 13:56:56: Job MG000051: from &lt;&gt; (local) &nbsp;&nbsp; * Recipient &lt;charlesnn@softwaremeadows.com&gt; unknown Fri 15, 13:56:56: Job MG000051: Processing failed deliveries and generating notifications &nbsp;&nbsp; Mail Delivery System &lt;&gt; - Notification discarded - potential loop. Fri 15, 13:57:07: Job MG000053: from postmaster@flattland.com (local) &nbsp;&nbsp; To: charles (local) -OK With that said, based on Thomas' advice, I'm going to <ul> <li>Disable&nbsp; "Suppress validation of 'From' field...", which is the default</li> <li>Disable "Accept mail for invalid local addresses", which is also the default.&nbsp; I had it enabled because, at one time, I accepted any email to the domain.</li> </ul> Thanks for the help.&nbsp; If I run into trouble, I'll post again. Charles

bladewolf55

posted May 11 '09 at 3:47 pm

I have spam email addressed from/to a non-local user that seems to bypass my global filtering rule. In the example below, there is a user named charles, who is also the postmaster. The email is addressed to a non-local user, "charlesn" (note the appended "n").

From: charlesn@domain.com
To: charlesn@domain.com

The global filtering rule is:

If header "FTRE" contains "charlesn@domain.com" Delete ""

I expect the email to be deleted before local delivery is attempted. However, the emails are instead processed as

Mon 11, 7:46:10: Job MG000001: sender address charlesn@domain.com' is invalid
Mon 11, 7:46:10: Job MG000001: Processing failed deliveries and generating notifications
Mon 11, 7:46:21: Job MG000003: from <> (local)
* Recipient <charlesn@domain.com> unknown
Mon 11, 7:46:21: Job MG000002: from postmaster@domain.com (local)
To: charles(local) -OK

1. Is this due to the option "Suppress validation of 'From' field when processing mail" (which is currently unchecked)? Or have I made some mistake?

2. If this option is the problem, and I enable it, what other problems might I encounter?

I'm using v4.62, with modules MercuryS, MercuryE, MercuryI

Thanks for your help, and this excellent product.

Charles

I have spam email addressed from/to a non-local user that seems to bypass my global filtering rule.&nbsp; In the example below, there is a user named charles, who is also the postmaster.&nbsp; The email is addressed to a non-local user, "charlesn" (note the appended "n"). From: charlesn@domain.com To: charlesn@domain.com The global filtering rule is: If header "FTRE" contains "charlesn@domain.com" Delete "" I expect the email to be deleted before local delivery is attempted.&nbsp; However, the emails are instead processed as Mon 11, 7:46:10: Job MG000001: sender address charlesn@domain.com' is invalid Mon 11, 7:46:10: Job MG000001: Processing failed deliveries and generating notifications Mon 11, 7:46:21: Job MG000003: from &lt;&gt; (local) &nbsp;&nbsp; * Recipient &lt;charlesn@domain.com&gt; unknown &nbsp;Mon 11, 7:46:21: Job MG000002: from postmaster@domain.com (local) &nbsp;&nbsp; To: charles(local) -OK 1. Is this due to the option "Suppress validation of 'From' field when processing mail" (which is currently unchecked)?&nbsp; Or have I made some mistake? 2. If this option is the problem, and I enable it, what other problems might I encounter? I'm using v4.62, with modules MercuryS, MercuryE, MercuryI Thanks for your help, and this excellent product. Charles &nbsp;

Thomas R. Stephenson

posted May 11 '09 at 6:20 pm

If header "FTRE" contains "charlesn@domain.com" Delete ""

I expect the email to be deleted before local delivery is attempted. However, the emails are instead processed as

This filter only comes into play after the message has been received by MercuryS.

Mon 11, 7:46:10: Job MG000001: sender address charlesn@domain.com' is invalid
Mon 11, 7:46:10: Job MG000001: Processing failed deliveries and generating notifications
Mon 11, 7:46:21: Job MG000003: from <> (local)
* Recipient <charlesn@domain.com> unknown
Mon 11, 7:46:21: Job MG000002: from postmaster@domain.com (local)
To: charles(local) -OK

1.
Is this due to the option "Suppress validation of 'From' field when
processing mail" (which is currently unchecked)? Or have I made some
mistake?

Could be but I doubt it. FWIW, if you turn this on it's only going to suppress looking for a valid format of the from: field address not the local user.

2. If this option is the problem, and I enable it, what other problems might I encounter?

You'll get messages with badly formatted e-mail addresses.

I'm using v4.62, with modules MercuryS, MercuryE, MercuryI

What you really need to do is reject this address in MercuryS. If this is the MAIL FROM address then the "Reject mail for invalid local users" will reject it as soon as the address is seen. If this is in the body of the message only then you will need to use transaction filtering.

<blockquote>If header "FTRE" contains "charlesn@domain.com" Delete ""</blockquote><blockquote>I expect the email to be deleted before local delivery is attempted.&nbsp; However, the emails are instead processed as </blockquote>This filter only comes into play after the message has been received by MercuryS. <blockquote>Mon 11, 7:46:10: Job MG000001: sender address charlesn@domain.com' is invalid Mon 11, 7:46:10: Job MG000001: Processing failed deliveries and generating notifications Mon 11, 7:46:21: Job MG000003: from &lt;&gt; (local) &nbsp;&nbsp; * Recipient &lt;charlesn@domain.com&gt; unknown &nbsp;Mon 11, 7:46:21: Job MG000002: from postmaster@domain.com (local) &nbsp;&nbsp; To: charles(local) -OK 1. Is this due to the option "Suppress validation of 'From' field when processing mail" (which is currently unchecked)?&nbsp; Or have I made some mistake?</blockquote>Could be but I doubt it.&nbsp; FWIW, if you turn this on it's only going to suppress looking for a valid format of the from: field address not the local user. <blockquote>2. If this option is the problem, and I enable it, what other problems might I encounter?</blockquote>You'll get messages with badly formatted e-mail addresses. <blockquote> I'm using v4.62, with modules MercuryS, MercuryE, MercuryI</blockquote>What you really need to do is reject this address in MercuryS.&nbsp; If this is the MAIL FROM address then the "Reject mail for invalid local users" will reject it as soon as the address is seen.&nbsp; If this is in the body of the message only then you will need to use transaction filtering.

dilberts_left_nut

posted May 11 '09 at 11:34 pm

If domain.com is your local domain, then charlesn@domain.com is not a non-local address, it is a non-existent local address.

Related Topics

Pending draft

Confirm move posts

Insufficient permissions

Select a different topic

Edit history