Note, that for internal email, the IP address used in SPAMDOMAINS is the email address of the sender. So, for us, that gets translated to our ISP's name, as only the mail server has rDNS set up (we trap on our own mail server address in spamdomains, as that was being faked by quite a bit of email and slipping thru (we used to whitelist our own server)). So, this am, all email sent inhouse started getting held (I was updating weights) until I added an alternative domain name to the list.
I assume that outside mail would have used the IP of the transmitting mail server, not that of the sender (unless they were the same). Karen > -----Original Message----- > From: R. Scott Perry > >The RDNS test is run against the IP address of the original sending mail > >server, not the IP of the client machine that drafted the > message. I don't > >believe that intermediate hops are considered in this test, just > the RDNS of > >the originating mail server. Scott, can confirm this. > > Declude JunkMail uses the same IP that it uses for getting the > reverse DNS > entry, and that is used for IP-based spam tests. By default, this is the > IP address that connected to IMail. However, depending on the > IPBYPASS and > HOP settings, it may be different (for example, the IP address that > connected to a backup or gateway mailserver). --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
