We have our smtp server running Declude with the Percent test enabled (with
a weight large enough to hold the message). The smtp server is then
forwarding the emails to our pop server (no declude). The strange thing is
that the first @ sign is replaced by % by the smtp server before sending it
to the pop server (both the smtp and pop are running Imail 5.09). That is
likely why the email is not failing the Percent test on the smtp server.
Here is a snippet of the log file on the pop server:
12:09 18:28 SMTPD(03C60122) [x.x.x.x] connect x.x.x.y port 2260
12:09 18:28 SMTPD(03C60122) [x.x.x.y] EHLO smtp.intrex.net
12:09 18:28 SMTPD(03C60122) [x.x.x.y] MAIL FROM:<[EMAIL PROTECTED]>
12:09 18:28 SMTPD(03C60122) [x.x.x.y] RCPT
To:<[EMAIL PROTECTED]>
12:09 18:28 SMTPD(03C60122) [x.x.x.y] D:\IMAIL\spool\D2716122.SMD 767
12:09 18:28 SMTP-(0000062C) processing D:\IMAIL\spool\Q2716122.SMD
12:09 18:28 SMTP-(0000062C) Trying hotmail.com (0)
12:09 18:28 SMTP-(0000062C) Connect hotmail.com [65.54.254.129:25] (1)
and then it goes on to try to deliver the message to hotmail.
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 09, 2002 6:16 PM
Subject: Re: [Declude.JunkMail] how to block multiple @ sign in To field
>
> >Is there anything we can do to prevent someone from sending an email with
> >multiple @ signs in the To field? e.g. a spammer sends an email to
> >[EMAIL PROTECTED]@myvaliddomain.com. The imail server is accepting
the
> >email since @myvaliddomain.com is a local domain and then sending the
> >message to [EMAIL PROTECTED] In effect relaying through the server.
> >What can I do with Declude to help stop this? An Imail rule does not work
> >since the UserId is processed before the Rules (I tried...). Any help is
> >appreciated.
>
> IMail should not be doing that.
>
> There is a known issue where IMail will accept mail in the format
> "[EMAIL PROTECTED]" under certain circumstances. However,
I
> am not aware of IMail accepting mail in the format
> "[EMAIL PROTECTED]@example.com" and causing it to be delivered.
>
> In the first case ("%"), the "PERCENT" test in Declude JunkMail will catch
it.
>
> Do you have some log files where IMail is doing this? What version are
you
> running?
> -Scott
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
