The new beta file from IMAIL will do that on your IMAIL server...thus not using the firewall I can see all mail numbers by IP or domain. Not as sophisticated as Declude but works until Declude comes along with something better(which I have no doubt will happen!)
Jim Rooth -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff Sent: Monday, April 22, 2002 9:50 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Hijack question Good morning all. Declude Hijack tracks the number of outgoing e-mail by IP address. But what about an office, such as ours, that uses a firewall with a DMZ, where the Imail is in the DMZ and the internal network uses NAT. Therefore, Declude Hijack sees all the users from the internal network as one IP address, that of the IP address of the firewall. Here is the exact setup: MS ISA server three homed in a DMZ setup. IP of DMZ NIC on ISA is x.x.x.5. IP of Internal NIC on ISA is 192.168.10.5 IP of Imail Nic is x.x.x.17. Imail receives the e-mail as if it came from the DMZ NIC and lists the from address as x.x.x.5. The problem can arise with many users on the internal network sending e-mail, whereas Declude Hijack sees all those messages as one user. I do not want to allow that IP, as I do want the protection that Hijack brings. For example, we had a developer use a "program" that was designed to send out bulk e-mail. Of course Hijack caught it. But it also caught every other e-mail going out from all other uses in the office. Is there a way for Hijack or Imail to get the IP address one step back? John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA� 92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com � � --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
