anti-spoofing log [message #131557] |
Sat, 27 August 2016 02:20  |
MRB1752
Messages: 4 Registered: August 2012
|
|
|
|
I have configured anti-spoofing as described in the knowledge base article. What would I search for in the logs to see if this setting has blocked any emails?
|
|
|
|
Re: anti-spoofing log [message #131590 is a reply to message #131562] |
Mon, 29 August 2016 16:20   |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
Mark Price (Kerio) wrote on Sun, 28 August 2016 09:21Hi There
You need to look in the security log for any anti-spoof entries.
I hope this helps.
Mark Price.
Mark,
What in particular should one find in the log? Please provide a sample log entry.
I'm looking at my security log and, since midnight (it's ~10:10 AM now), I have almost 3,000 entries and the log has history for several days. Whenever I need to find something in the logs, I search for it, otherwise I would never find anything.
Thanks.
Cheers,
Jon
|
|
|
Re: anti-spoofing log [message #131616 is a reply to message #131557] |
Tue, 30 August 2016 17:17  |
freakinvibe
Messages: 597 Registered: April 2004
|
|
|
|
You would see something like this if you enable anti-spoofing:
Message from IP address 195.245.231.144, sender <sendername<_at_>mydomain.org> rejected: sender domain requires authentication
If you enable SPF, you would see:
SPF check failed: The IP address '210.68.71.113' is not in permitted set for sender 'sendername<_at_>senderdomain.com' (FAIL)
Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
|
|
|