This is a discussion on p0f not working with MTA filter within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; It appears the the p0f checking is only pulling the IP address of the last MTA to touch the message. ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
It appears the the p0f checking is only pulling the IP address of the
last MTA to touch the message. In my case 127.0.0.1 as I am using an MTA filter in front of Postfix. Is there an easy way to get amavisd-new to skip to subsequent host if it gets is localhost? Sample message header - MTA filter (MessageWall recieves message from external host, passes to Postfix on 127.0.0.1, then LMTP to amavisd-new, then back to Postfix for final destination...). Amavisd-new's p0f check is querying 127.0.0.1 instead of the 123.123.123.123 IP. .... Received: from localhost (localhost.localdomain [127.0.0.1]) by mx8.domain.us (Postfix) with ESMTP id B93DDD58B7D for <brian@domain.com>; Fri, 14 Apr 2006 21:16:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at domain.us Received: from mx8.domain.us ([127.0.0.1]) by localhost (domain.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id gG0kBzQ9y24B for <brian@domain.com>; Fri, 14 Apr 2006 21:16:38 -0700 (PDT) Received: from mx8.domain.us (localhost.localdomain [127.0.0.1]) by mx8.domain.us (Postfix) with ESMTP id 60ACFD58B7C for <brian@crumrine.net>; Fri, 14 Apr 2006 21:16:38 -0700 (PDT) X-MessageWall-Score: 0 (mx8.domain.us) Received: from [123.123.123.123] by mx8.domain.us (MessageWall 1.0.8) with SMTP; 15 Apr 2006 04:16:38 -0000 Received: from domain.net ([127.0.0.9]) by domain.com for <brian@domain.net>; Fri, 14 Apr 2006 21:15:17 -0700 Message-Id: <1145074517.26548@domain.net> Sample of the debug from amavisd-new: Apr 14 21:15:26 southbay amavis[1556]: (01556-01-40) Fingerprint collect: max_wait=0.000, 127.0.0.1 QzrH+8hVX6fS \r\n... => Apr 14 21:15:28 southbay amavis[1557]: (01557-01-5) Fingerprint collect: max_wait=0.000, 127.0.0.1 hNT+t9KWKK1S \r\n... => Apr 14 21:15:28 southbay amavis[1557]: (01557-01-6) Fingerprint collect: max_wait=0.000, 127.0.0.1 ucxyDkYx3uqp \r\n... => Apr 14 21:15:31 southbay amavis[1561]: (01561-01) Fingerprint collect: max_wait=0.000, 127.0.0.1 zQfv9Aa6Ldw4 \r\n... => Apr 14 21:15:32 southbay amavis[1557]: (01557-01-7) Fingerprint collect: max_wait=0.000, 127.0.0.1 5b+PEBn5ZT9x \r\n... => |