Buffalo Forums

Products => Storage => Topic started by: greggmh123 on April 02, 2009, 11:37:56 AM

Title: Email alerts on NAS drives: product improvement suggestion
Post by: greggmh123 on April 02, 2009, 11:37:56 AM
   

Hello!

 

I asked the following question of pre-sales support regarding the LSXH10TL NAS drive:

 

Can the LSXH10TL device have a designated sending address, i.e., NAS@clientdomain.com, or does it send as though it is coming from the same address to which it is being sent? The latter is a problem if a domain has a "hard-fail" SPF record that specifies which mail servers are allowed to send in the domain's name. Currently, the old LS500 that I have at one client will send mail to me that claims to be from my own email address ("spoofing" my domain's email address in the From field), even though that is technically forging the "Mail From" field of the email. Because my email server looks at SPF records and my domain has a hard-fail SPF record, that email will be dropped by default, as it should be for spoofing my domain. I have to whitelist the client's mail server's IP address in order to receive the alert emails from the LS500.

 

There response was that, no, it does not send properly:

"It appears that the device sends it using the line

From:HOSTNAME (Linkstation)<DESTINATION_EMAIL@DOMAIN.com>

So the Reply-To is set to the destination address."

 

So, it effectively is still forging the mail header. If your mail server does not check SPF records, and your domain does not have a hard-fail SPF record, then this issue will not affect you.

 

Would anyone else want to chime in to ask them to fix this problem?

 

Gregg

Browser ID: smf (is_webkit)
Templates: 1: Printpage (default).
Sub templates: 4: init, print_above, main, print_below.
Language files: 1: index+Modifications.english (default).
Style sheets: 0: .
Hooks called: 45 (show)
Files included: 27 - 1055KB. (show)
Memory used: 735KB.
Tokens: post-login.
Queries used: 10.

[Show Queries]