Thanks I'll try this out. Jeff Kratka
---------- Original Message ---------------------------------- From: "DLAnalyzer Support" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 13 Sep 2003 22:41:45 -0400 >Jeff, > >This is similar to the issue of whitelisting the postmaster account. >Spammer's got hip to the fact that most people whitelist the postmaster >account and would include as a recipient for the spam the postmaster. > >We were getting burned by this due to the high amount of porn spam that was >dwindling in using this techinique. > >What we did to prevent this and the solution would be valid in your case is >to do the following > >(1) Setup the following test >POSTMASTER filter x:\IMail\Declude\postmaster.txt x -100 0 > >**Make sure to give it a high enough reverse weight so that no matter how >many tests it failed the reverse weight will counter that and ensure >delivery. > >(2) In the filter test file use the ALLRECIPS filter >ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] > >What this will do is the following. >(1) The email will still be delivered to the user, due to the high amount of >reverse weight >(2) The message will be blocked to the other recipients, because it will >still be weighted like any other message. > >Darrell >Invariant Systems >http://www.dlanalyzer.com > > >Rich writes: > >> At 04:10 PM 9/13/2003, Jeff Kratka wrote: >>> I have a couple of customers that want to be whitelisted completely so I >>> added "WHITELIST TO [EMAIL PROTECTED]" to the global config. The only thing >>> is >>> that I have found out that if spam is sent to multiple recipients and >>> this >>> person is listed it is allowed to come to everyone on the list since the >>> one >>> person is whitelisted. >> >> We've been just giving them a blank .junkmail file, it seems to let >> everything through, and not whitelist mail sent to multiple recipients. >> >>> Am I doing something wrong or is there a way to prevent this. >>> >>> Jeff Kratka >>> ***************************************************** >>> TymeWyse Internet >>> P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 >>> tel/fax: (541) 839-6027 - [EMAIL PROTECTED] >>> ***************************************************** >>> >>> --- >>> [This E-mail was scanned for viruses by Declude Virus >>> (http://www.declude.com)] >>> >>> --- >>> This E-mail came from the Declude.JunkMail mailing list. To >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>> type "unsubscribe Declude.JunkMail". The archives can be found >>> at http://www.mail-archive.com. >> >> -------------- >> Rich Griebel >> [EMAIL PROTECTED] >> http://www.kendra.com >> Scanned for Viruses using Declude and F-Prot >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. > > > > ------------------------------------------------ >DLAnalyzer a comprehensive reporting tool for >Declude Junkmail Logs - http://www.dlanalyzer.com > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > -- ********************************************************** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ********************************************************** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
