I setup IP Shield for allowed hosts and turned on “Check From header Address against IP Shield”
From what I read about BATV, it is more of a “reply” protection thing.
John Hanks
Skagit Valley Computer Solutions
360-855-0313
From: md-support@mdaemon.com [mailto:md-support@mdaemon.com] On Behalf Of Arron Caruth
Sent: Friday, July 15, 2022 12:47 PM
To: md-support@mdaemon.com
Subject: [md-support] Spam getting past, same sender as recipient
BATV should come into play anytime a NULL value is passed for the MAIL FROM command during the inbound SMTP session. If you have instances where that is not happening, please post log snippets so we can take a look.
On Fri, 15 Jul 2022 12:38:00 -0700, "john@sv-cs.com (John Hanks)" <john@sv-cs.com> wrote:
I think I’ve got it solved, but BATV doesn’t look like it’s a big help in version 19.7
Are the messages missing the From header?
Yes, during the SMTP transaction.
If they are, enable the option to Refuse messages which violate RFCs.
Thanks, I’ll try that too.
Skagit Valley Computer Solutions
From: md-support@mdaemon.com [mailto:md-support@mdaemon.com] On Behalf Of Arron Caruth
Sent: Thursday, June 30, 2022 7:24 AM
To: md-support@mdaemon.com
Subject: [md-support] Spam getting past, same sender as recipient
Are the messages being sent with a null MAIL FROM command during the SMTP session?
If they are, try enabling BATV.
Are the messages missing the From header?
If they are, enable the option to Refuse messages which violate RFCs.
If its something else, can you provide a sample message, along with all the headers, and the inbound SMTP session that shows the message being received?
On Mon, 27 Jun 2022 13:19:00 -0700, "john@sv-cs.com (John Hanks)" <john@sv-cs.com> wrote:
I’m getting more and more people with this issue.
Is there somewhere I can tell MD to refuse emails that have a blank “From”?
Skagit Valley Computer Solutions
From: md-support@mdaemon.com [mailto:md-support@mdaemon.com] On Behalf Of Arron Caruth
Sent: Wednesday, May 25, 2022 5:31 AM
To: md-support@mdaemon.com
Subject: [md-support] Spam getting past, same sender as recipient
If I'm understanding correctly, there are two things I can think of that would stop it completely.
1. BATV will reject messages that have a NULL MAIL FROM value and that do not have a properly encoded RCPT TO value.
2. Configure IP shielding for the local domains and local IP addresses. Then enable the options to exclude authenticated sessions from IPShielding and Apply IP Shielding to the FROM header.
On Tue, 24 May 2022 15:43:28 -0700, "john@sv-cs.com (John Hanks)" <john@sv-cs.com> wrote:
A couple weeks ago, one of my clients started getting lots of spam passing through that has a blank "from" during the SMTP session, then the body of the email shows the "From" as the same person it's going to.
Where should I look to stop this?
John Hanks
Skagit Valley Computer Solutions
360-855-0313
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-SUPPORT--------------------------------------------------------------
This list is for questions and discussion about MDAEMON. To unsubscribe
from this mailing list send an email to md-support-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------
--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion. MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------