About Steflstefan

Steflstefan · 09-20-2022

Why is the DKIM alignment "false" in the DMARC check although the DKIM check itself results in a pass?Here is an example:From header: Microsoft Azure <azure-noreply@microsoft.com>Mon Sep 19 15:59:36 2022 Info: MID 93466907 SPF: mailfrom identity azur...

Steflstefan · 08-15-2022

Hello @All,Are several conditions checked equally one after the other or do the conditions have to be nested by use of " else "?So variant 1 or 2?Variant 1if (recv-listener == "in") { if (sendergroup == "TRUSTLIST") { action; } if (sendergroup == "G...

Steflstefan · 06-09-2022

Hi @All shouldn't the links in the spam notification be generated depending on the trailblazer status?trailblazer enabled = links https:\\sma.url:4431\reference-to-user-spam-quarantinetrailblazer disabled = links https:\sma.url\reference-to-user-spam...

Steflstefan · 06-07-2021

Hello Cisco,since some day we get this error:07 Jun 2021 10:56:04 (GMT +02:00) Message 47730774 SPF: mailfrom identity >username<@cisco.com PermErrorDigging SPF Record cisco.com shows:cisco.com. 1799 IN TXT "v=spf1 include:mail.zendesk.com ?all" cis...

Steflstefan · 02-11-2021

Hellosometimes I recieve a warning from ESAThe Warning message is:THREAT_FEEDS: The storage limit of 1250000 observables exceeded for the observable type: URL I have two ETF souces configured; Haila_phishtank and OTX Alienvault.Is there a option to i...

Steflstefan · 11-07-2022

Yes, it's simple. Create an outgoing content filter. No conditions, one action: "drop" oder "bounce" whatever you need. Add the content filter to outgoing "Default" policy.Create a new outgoing policy. Add the senders you would allow, optional: add t...

Steflstefan · 11-02-2022

There seems to be a problem with the OTX Alienvault service.Look here: https://success.alienvault.com/s/topic/0TO0Z000000oRS1WAM/open-threat-exchange-otxGrz

Steflstefan · 10-10-2022

Sorry Arjan,you're right but this is not the point.Both checks (SPF + DKIM) are passed.But at the 1st example the DMARC shows the SPF as True and the DKIM as False.Same check results at 2nd example, SPF + DKIM passed.DMARC shows SPF and DKIM as True....

Steflstefan · 09-20-2022

Maybe you can resolve this by a special smtp-route.Create a smtp route "oursandbox.local"add ips or hostnames from sandbox and default mailhosts.set sandbox system to highest prio (e.g. prio number 0)set default systems to lower prio (e.g. prio numbe...

Steflstefan · 08-23-2022

Ok.But this from your explanation looks quite wrong:spf.anotherparty.com contains this : v=spf1 a:4.4.4.4 ~allspf.yesmail.com contains this : v=spf1 a:1.2.3.4 -all If you use an ip address, you should use ip4: not a:. Try vamsoft SPF checker https://...

Member Since	‎09-29-2017 01:22 AM
Date Last Visited	‎12-14-2022 01:41 AM
Posts	37
Total Helpful Votes Received	25

User Statistics

User Activity

DMARC-DKIM alignment not correct

Message filter with several conditions

Spam Notification And Trailblazer

SPF PermError for cisco.com

ETF The storage limit exceeded

Re: Email Security ESA block any sender to any domain outgoing

Re: THREAT_FEEDS: Unable to fetch the observables (ESA C300V)

Re: DMARC-DKIM alignment not correct

Re: Alternate Destination Host failures

Re: Order of includes in SPF records