I'm a bit confused with my configuration, especially with HOP, HOPHIGH and IPBYPASS
I have a mailrelay server with a SMTP virusscanner which forward the e-mail to the Imail server (with a different virusscanner).
A bit redundant maybe, but also secure (as I have only (max) 5000 emails a day, I can spare the capacity)
As i see it I have 4 HOPs:
internet --> Server 1 [virusscanner --> mailrelay] --> Server 2 [virusscanner --> Imail(Declude)]
So I have in my Global.cfg:
HOP 4
HOPHIGH 0
IPBYPASS 192.87.68.a (the mailrelay)
Using a setting of "HOP 4" means that Declude JunkMail should scan the E-mail as if it were running 4 hops away from your mailserver. That would mean that you have 4 mailservers in front of the IMail server, which would be very unusual. Given the IPBYPASS line, you're now at 5 mailservers if 192.87.68.a is included. That's a lot of hops.
What I would recommend in this case is using "HOP 0", but having an IPBYPASS line for each of the mailservers before the IMail server. So if there is only Server 1 before the IMail server, you should be able to use:
HOP 0 HOPHIGH 0 IPBYPASS 192.87.68.a
I think my reasoning is wrong because I see a lot of mail getting flagged as originating from my own Imail server:
X-Note: This E-mail was sent from (Private IP) ([192.87.68.b]). (the Imail server)
What am I doing wrong?
That is very unusual. Do you have another mailserver besides IMail running on the IMail server (which listens on port 25 and sends E-mail to IMail on a different port)? Even if that was the case, you should normally see an IP of 127.0.0.1, not the IP of the IMail server.
Could you post all the Received: headers from an incoming E-mail? That should help determine the best settings to use.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
