GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » anti-spoofing log
anti-spoofing log [message #131557] Sat, 27 August 2016 02:20 Go to next message
MRB1752 is currently offline  MRB1752
Messages: 4
Registered: August 2012
I have configured anti-spoofing as described in the knowledge base article. What would I search for in the logs to see if this setting has blocked any emails?

Re: anti-spoofing log [message #131562 is a reply to message #131557] Sun, 28 August 2016 15:21 Go to previous messageGo to next message
Mark Price (Kerio) is currently offline  Mark Price (Kerio)
Messages: 136
Registered: February 2011
Location: UK
Hi There

You need to look in the security log for any anti-spoof entries.

I hope this helps.
Mark Price.


Mark Price
Kerio technical support.

Log Support Incidents here: http://www.kerio.com/support
Also, please use our KB: http://kb.kerio.com
Re: anti-spoofing log [message #131590 is a reply to message #131562] Mon, 29 August 2016 16:20 Go to previous messageGo to next message
j.a.duke is currently offline  j.a.duke
Messages: 239
Registered: October 2006
Mark Price (Kerio) wrote on Sun, 28 August 2016 09:21
Hi There

You need to look in the security log for any anti-spoof entries.

I hope this helps.
Mark Price.


Mark,

What in particular should one find in the log? Please provide a sample log entry.

I'm looking at my security log and, since midnight (it's ~10:10 AM now), I have almost 3,000 entries and the log has history for several days. Whenever I need to find something in the logs, I search for it, otherwise I would never find anything.

Thanks.

Cheers,
Jon
Re: anti-spoofing log [message #131616 is a reply to message #131557] Tue, 30 August 2016 17:17 Go to previous message
freakinvibe is currently offline  freakinvibe
Messages: 597
Registered: April 2004
You would see something like this if you enable anti-spoofing:
Message from IP address 195.245.231.144, sender <sendername<_at_>mydomain.org> rejected: sender domain requires authentication


If you enable SPF, you would see:
SPF check failed: The IP address '210.68.71.113' is not in permitted set for sender 'sendername<_at_>senderdomain.com' (FAIL)


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Previous Topic: Monitoring Outgoing Queue and Alerting Possible?
Next Topic: Kerio Connect Client Crashing on Contacts
Goto Forum:
  


Current Time: Wed Sep 27 04:33:09 CEST 2023

Total time taken to generate the page: 0.07599 seconds