This is similar to the issue of whitelisting the postmaster account. Spammer's got hip to the fact that most people whitelist the postmaster account and would include as a recipient for the spam the postmaster.
We were getting burned by this due to the high amount of porn spam that was dwindling in using this techinique.
What we did to prevent this and the solution would be valid in your case is to do the following
(1) Setup the following test
POSTMASTER filter x:\IMail\Declude\postmaster.txt x -100 0
**Make sure to give it a high enough reverse weight so that no matter how many tests it failed the reverse weight will counter that and ensure delivery.
(2) In the filter test file use the ALLRECIPS filter
ALLRECIPS 0 CONTAINS [EMAIL PROTECTED]
What this will do is the following.
(1) The email will still be delivered to the user, due to the high amount of reverse weight
(2) The message will be blocked to the other recipients, because it will still be weighted like any other message.
Darrell
Invariant Systems
http://www.dlanalyzer.com
Rich writes:
At 04:10 PM 9/13/2003, Jeff Kratka wrote:I have a couple of customers that want to be whitelisted completely so I
added "WHITELIST TO [EMAIL PROTECTED]" to the global config. The only thing is
that I have found out that if spam is sent to multiple recipients and this
person is listed it is allowed to come to everyone on the list since the one
person is whitelisted.
We've been just giving them a blank .junkmail file, it seems to let everything through, and not whitelist mail sent to multiple recipients.
Am I doing something wrong or is there a way to prevent this.
Jeff Kratka
*****************************************************
TymeWyse Internet
P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
tel/fax: (541) 839-6027 - [EMAIL PROTECTED]
*****************************************************
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--------------
Rich Griebel
[EMAIL PROTECTED]
http://www.kendra.com
Scanned for Viruses using Declude and F-Prot
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
------------------------------------------------
DLAnalyzer a comprehensive reporting tool for
Declude Junkmail Logs - http://www.dlanalyzer.com
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
