Hi,
What ip number wil Declude list in the sender line?
Will that allways be the connecting ip number or will it indeed skip numbers
listed in an ipbypass line and list the first number after
that?
Found this in a mail I was looking
at:
X-Declude-Sender: [EMAIL PROTECTED]
[217.114.97.6]
Our IMail server trapped a spam message that was whitelisted by Declude
JunkMail. The header of the message is shown below:
Received: from fastwave.net [210.221.79.126] by ns3.fastwave.net
(SMTPD32-8.05) id AB32D5301D8; Sat, 29 Jan 2005
10:51:30 -0800
Message-ID:
I would imagine that you have AUTOWHITELIST ON and that your customer
has his own E-mail address in his Web mail address book. This E-mail
appears to have forged his address, and this would cause it to be
whitelisted. If not, check for other forms of Mail From whitelisting.
This could also
-
From: Kim Premuda [EMAIL PROTECTED]
To: Declude JunkMail Forum Declude.JunkMail@declude.com
Sent: Saturday, January 29, 2005 6:25 PM
Subject: [Declude.JunkMail] 'X-Declude-Sender:' Question
Our IMail server trapped a spam message that was whitelisted by Declude
JunkMail. The header of the message
Thanks Matt and Darrell.
I would imagine that you have AUTOWHITELIST ON and that your customer
has his own E-mail address in his Web mail address book.
You both were correct...AUTOWHITELIST is ON and the customer's e-mail address
was listed in his Web mail address book.
--
Kim W. Premuda
With the latest beta I am seeing messages where the
X-Declude-Sender is missing the IP address, i.e., [0.0.0.0].
Ones I've seen are from my internal network.
Terry Fritts
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
With the latest beta I am seeing messages where the
X-Declude-Sender is missing the IP address, i.e., [0.0.0.0].
Ones I've seen are from my internal network.
Are you using HOP or IPBYPASS?
Could you post all the Received: headers for one of these?
I would like to try and compile a list of IP's and senders to add to my
kill.lst and to the SMTP Access Table to stop more mail at the front door.
Any recommendations on the best method to do this?
I have a lot of messages in the hold folder that I could search for. Should
I just search for the
Pardon my dimwitedness, but how is it that the
X-Declude-Sender is [EMAIL PROTECTED]
[209.216.98.30] ?When I ping SMTP.REGSVR.NET I get "Bad IP
address." When I ping just REGSVR.NET I get 209.216.98.7. When I ping
SMTP203.LOCALSVR.NET I get 209.216.98.30.How does Declude
deduce this, and
Pardon my dimwitedness, but how is it that the X-Declude-Sender is
mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
[209.216.98.30] ?
When I ping SMTP.REGSVR.NET I get Bad IP address. When I ping just
REGSVR.NET I get 209.216.98.7. When I ping SMTP203.LOCALSVR.NET I get
209.216.98.30.
How does
PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, July 09, 2003 2:13 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] X-Declude-Sender Missing from Header
We are seeing several spam emails delivered to our clients which are
apparently able to bypass JMPro filters as there is no X-Declude
These are our configuration settings:
XSENDER ON
That should cause the X-Declude-Sender: header to appear in the headers of
all E-mails.
Have you checked to see if there are any C:\Declude.gp1 or C:\Declude.gp2
files? Is there any pattern to the E-mails without that header (all
Of R. Scott Perry
Sent: Thursday, July 10, 2003 11:48 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] X-Declude-Sender Missing from Header
These are our configuration settings:
XSENDER ON
That should cause the X-Declude-Sender: header to appear in the headers of
all E-mails
So far we are getting reports from only a single user. A quick review of the
current spool shows no email without the X-Declude-Sender line. There are no
gp1 or gp2 files on the server. Do you think it is some setting in the
user's mail client (Outlook 2002) which is stripping out some of the
We are seeing several spam emails delivered to our clients which are
apparently able to bypass JMPro filters as there is no X-Declude-Sender line
in the header. Can anyone explain why it is missing (see sample header
below)?
X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL -
by e-mail.
*
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, July 09, 2003 2:13 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] X-Declude-Sender
16 matches
Mail list logo
