so if I have in global.cfg: PHRASESCAN external nonzero "D:\Imail\mail_ameripride_org\phrscan.exe %REVDNS%" 10 0
it will give me: phrscan (Private IP) c:\IMail\spool\D1234567.SMD phrscan (timeout) c:\IMail\spool\D1234567.SMD
depending on internal emails vs external emails
Correct.
or does %REVDNS% actually give something I'm not seeing and it is replaced in the header? When I look at the headers %REVDNS% returns the private or timeout
That would occur if your DNS server is only returning certain answers, and timing out on others. That's going to cause a lot of problems -- you should look into why that is happening.
Normally, if everything (on your end and the remote end) is set up properly, the %REVDNS% variable will display the reverse DNS entry of the IP that connected to your server.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
