MailScanner & IPv6 [SOLVED]

[Rick Cooper]

    [ The following text is in the "ISO-8859-15" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Mike
> Sent: Wednesday, April 06, 2005 5:37 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: MailScanner & IPv6 [SOLVED]
>
>
> >-----Original Message-----
> >From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> >Behalf Of Mike
> >
> >Now to figure out what the "if ($ip =~ /\[([\d.:abcdef]+)\]/) {" check
> >needs to be (I'm not a perl guru). I'll try to experiment a bit.
>
> I solved this (see patch) by changing
>
> if ($ip =~ /\[([\d.:abcdef]+)\]/) {
>
> into
>
> if ($ip =~ /\[([IPv6\d.:abcdef]+)\]/) {

I was about to suggest you go with if ($ip =~ /\[IPv6:([\d.:abcdef]+)\]/) {

if they are using the same format as in the log snipet you showed I don't
believe you actually want the "IPv6:" portion in the IP address, unless
somewhere else in the code it's removed. Your change would return the IP as
IPv6:2001:888:0:1::666 not 2001:888:0:1::666

Rick
>
> in Sendmail.pm. I'm not sure if this is the best check
> (ItWorksForMe[tm]), but I'll leave that to Julian.
>
> Now I'm off to MailWatch, since it seems there's also something
> going wrong there. The mailscanner database does have the correct
> clientip record, however the details of a IPv6 message shows
> "127.0.0.1" as "Received from:". There will probably a similar
> check with default "127.0.0.1" in one of the .php files.
>
> Mike.
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!