So, Scott, what you're saying is I should use:

HOP 0
IPBYPASS

for IMGates in front of Imail than:

The above settings will scan the E-mail as if Declude JunkMail was running on the IMGate servers (so it will see the IP address of the mailservers that connected to the IMGate servers).


HOP 0
HOPHIGH 1
IPBYPASS

The HOPHIGH setting tells Declude JunkMail to scan multiple hops. So in this case, Declude JunkMail would scan both the IP address that connected to the IMail server, as well as the next hop (the mailserver that connected to the mailserver that connected to the IMGate server). Normally, this isn't done, but it can slightly improve spam detection. A case where this would be very useful, though, is if you have a lot of mail forwarded from other servers to yours (in which case the mailserver forwarding the E-mail wouldn't be in any spam databases, but the mailserver that connected to it would be).


Note that this will cause extra processing time, as two different IPs will need to be scanned.

I still have a few domains connecting straight to my Imail server but most
going through my IMGates.  The first scenario would cover me if I IPBYPASSed
my IMGate machines?

Correct. That will cover mail sent from the IMGate servers, as well as E-mail sent directly to your IMail server (from the remote mailserver).


So IPBYPASS doesn't just 'white' the IP, it moves up to
the server that connected to the bypassed IP ONLY if that wouldn't violate
HOPHIGH, right?

Correct. However, HOPHIGH takes the HOP/IPBYPASS into account, so it just guarantees that multiple hops will be scanned.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to