RE: 'fraud detection checks' - resolved

Again, sorry to take everyone’s bandwidth on this, but I would like to let you know the resolution…

Apparently, the text is being added by my outlook client because the message is coming from an IP address (OSR’s?) that doesn’t match the SPF records in DNS. The mail server sends the message ‘as if’ it was coming from “xxxxx@ramsystems.biz”. Of coure the listserv’s address is not in my SPF record.

So, in theory, anyone using outlook should be seeing the “[This sender failed our fraud detection checks…” on my messages.

* Bob

? Bob Ammerman
? xxxxx@ramsystems.biz
716.864.8337

138 Liston St
Buffalo, NY 14223
www.ramsystems.biz

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:bounce-622955-
xxxxx@lists.osr.com] On Behalf Of Robert Ammerman
Sent: Thursday, January 05, 2017 9:38 AM
To: Windows System Software Devs Interest List
> Subject: [ntdev] ‘fraud detection checks’
>
> [This sender failed our fraud detection checks and may not be who they appear
> to be. Learn about spoofing at http://aka.ms/LearnAboutSpoofing]
>
> Sorry to pollute the list with this, but I am concerned with the following
> message that gets inserted at the top of my posts:
>
> > [This sender failed our fraud detection checks and may not be who they
> > appear to be. Learn about spoofing at
> > http://aka.ms/LearnAboutSpoofing]
>
> Any ideas why this might be happening? My account is an O365 Exchange
> online account. Do I have to set up some DNS record or something?
>
> * Bob
>
>
> Bob Ammerman
> xxxxx@ramsystems.biz
> 716.864.8337
>
> 138 Liston St
> Buffalo, NY 14223
> www.ramsystems.biz
>
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com [mailto:bounce-622954-
> > xxxxx@lists.osr.com] On Behalf Of Robert Ammerman
> > Sent: Thursday, January 05, 2017 9:33 AM
> > To: Windows System Software Devs Interest List
> > Subject: RE: RE:[ntdev] Variadic functions
> >
> >
> > A variadic function is not the same as a function that takes a list of
> > fixeds argument, one of which is a va_list. Think of the va_list
> > argument as being the address of a structure.
> >
> > Again, look at the difference between printf and vprintf.
> >
> > * Bob
> >
> >
> > Bob Ammerman
> > xxxxx@ramsystems.biz
> > 716.864.8337
> >
> > 138 Liston St
> > Buffalo, NY 14223
> > www.ramsystems.biz
> >
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com [mailto:bounce-622950-
> > > xxxxx@lists.osr.com] On Behalf Of xxxxx@gmail.com
> > > Sent: Thursday, January 05, 2017 8:43 AM
> > > To: Windows System Software Devs Interest List
> > > Subject: RE:[ntdev] Variadic functions
> > >
> > > Below is the prototype for DbgPrint
> > > ULONG
> > > DbgPrint(
> > > IN PCHAR Format,
> > > . . . . [arguments]
> > > );
> > >
> > >
> > > You can see that it is in fact declared as a variadic function.
> > >
> > > —
> > > NTDEV is sponsored by OSR
> > >
> > > Visit the list online at:
> > > http:
> > >
> > > MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> > > software drivers!
> > > Details at http:
> > >
> > > To unsubscribe, visit the List Server section of OSR Online at
> > > http:
> >
> > —
> > NTDEV is sponsored by OSR
> >
> > Visit the list online at:
> > http:
> >
> > MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> > software drivers!
> > Details at http:
> >
> > To unsubscribe, visit the List Server section of OSR Online at
> > http:
>
> —
> NTDEV is sponsored by OSR
>
> Visit the list online at: http:
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at
> http:</http:></http:></http:></http:></http:></http:></http:></http:></http:>

I use Outlook (NOT Office 365) and I’ve never seen that message.

Further, what you’re seeing should not be the result of SPF checking… at least not SPF V1. SPF V1 doesn’t use the “header sender address” (which would be xxxxx@ramsystems.biz) it uses the “enevelope sender address”, which IIRC is set properly by Lyris.

So… hmmmm…

Peter
OSR
@OSRDrivers

I was seeing the same as bob, but it recently stopped. And you can guess that as a microsoftie I am on the bleeding edge of outlook and exchange :wink:

d

-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of xxxxx@osr.com
Sent: Thursday, January 5, 2017 9:39 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] RE: ‘fraud detection checks’ - resolved



I use Outlook (NOT Office 365) and I’ve never seen that message.

Further, what you’re seeing should not be the result of SPF checking… at least not SPF V1. SPF V1 doesn’t use the “header sender address” (which would be xxxxx@ramsystems.biz) it uses the “enevelope sender address”, which IIRC is set properly by Lyris.

So… hmmmm…

Peter
OSR
@OSRDrivers


NTDEV is sponsored by OSR

Visit the list online at: http:

MONTHLY seminars on crash dump analysis, WDF, Windows internals and software drivers!
Details at http:

To unsubscribe, visit the List Server section of OSR Online at http:</http:></http:></http:>