>[EMAIL PROTECTED] wants to block spam
>2.they also have a [EMAIL PROTECTED]
>3.I tell them they can forward mail to [EMAIL PROTECTED] from that
>maine.rr.com account and it will mark spam.
>4.Things are working dandy...
>5.spamcop gets wind of a spam that seems to increminate a server in the
>roadrunner system - one in NYC.
And that's where the problem is.
If your user is forwarding their mail from a server listed in SPAMCOP,
you've got a choice: Either whitelist that mailserver (so all their E-mail
comes through, even spam sent to their rr.com account), or do nothing (in
which case none of their forwarded mail will come through). Whitelisting
an E-mail will cause it to pass all the spam tests, no matter what --
nothing will override the whitelist.
If you are using the weighting system, there is a (somewhat complex) way
that you can get around this. You can create a "IP blacklist" with a
negative weight (by having"MAINERRCOM ipfile
C:\IMail\Declude\mainerrcom.txt x -9 0" in the global.cfg file, and a file
C:\IMail\Declude\mainerrcom.txt with just a single line "24.29.99.40" in
it). This will counteract the SPAMCOP test, by subtracting 9 from the
total weight when E-mail comes in from that server (that assumes that the
SPAMCOP test is set up with a weight of 9).
>Is there any way to just IGNORE IP 24.29.99.40 in the hops check and
>continue down the hops / without breaking something else...
Ah, you're smarter than you give yourself credit for! This sounds like the
best answer. If you trust 24.29.99.40, you could add an "IPBYPASS
24.29.99.40" line to the global.cfg file. Declude will then look at the
next IP, and act as though that was the server connecting to it.
That sounds like the easiest and best solution.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
