One more thing - what about multiple entries? How would that look (UCD uses multiple antivirus servers)?
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, March 27, 2003 13:37 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Help filtering >I have a few users whose email is auto-forwarded from UCD to our email >server - and UCD puts it through an anti-virus server prior to sending out >- consequently, the email below and others like it get through. Is it >possible that this email below is NOT in the spam dB? > >>Received: from frankfurt.ucdavis.edu [169.237.104.161] by >>primate.ucdavis.edu with ESMTP >> (SMTPD32-7.13) id AF9ADF1025C; Thu, 27 Mar 2003 11:23:06 -0800 >>Received: from mail69.myvirtualdeals.com (mail69.myvirtualdeals.com >>[65.61.189.95]) >> by frankfurt.ucdavis.edu (8.11.6/8.11.0/virus-scan-4.0.1) with >> SMTP id h2RJN4T07244 >> for <[EMAIL PROTECTED]>; Thu, 27 Mar 2003 11:23:04 -0800 (PST) In this case, you can add a line "IPBYPASS 169.237.104.161" to your \IMail\Declude\global.cfg file. That way, Declude JunkMail will work as though it is actually running on the AV server, so it will scan the IP 65.61.189.95 (rather than the 169.237.104.161 IP, which is yours). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
