I did not expect it to be caught. I was woundering why it was not caught. Whith your explanation I think I have a better understanding of how spam domains works.
So you are saying that if I have the following line gmx.at the message would have failed spam doamins? But if I say have the following line gmx.at verizon.net it would have passed spam domains and also no entry would pass all mail from sender gmx.at. So spam domains matches sender domains with the reverse DNS entries of the servers they were sent from. In the above format. Thank you. Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Bill Landry > Sent: Tuesday, July 01, 2003 5:15 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Spam domains > > > Why would you expect this line in your SD file to flag this message? The > X-Declude-Sender is [EMAIL PROTECTED] SD looks at the X-Declude-Sender > domain and does are RDNS query on it to see if the response has a matching > domain, or one that is listed as an alternative on the same line > in your SD > file. Do you have an entry in you SD file for "gmx.at"? If not, > then this > message should not have been flagged by SD. > > Bill > ----- Original Message ----- > From: "Kevin Bilbee" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, July 01, 2003 5:06 PM > Subject: [Declude.JunkMail] Spam domains > > > > Why did this one not get caught by the spam domains test. What would I > need > > in my sd.txt file to catch items like these. > > > > These are the lines in my sd.txt that contain verizon.net > > > > bellatlantic.net verizon.net > > gte.net verizon.net > > verizon.net .bellatlantic. > > > > > > > > Kevin Bilbee > > > > Received: from ns1.ssc-isp.net [12.9.25.242] by standardabrasives.com > > (SMTPD32-7.15) id AAB04460260; Sun, 29 Jun 2003 19:04:32 -0700 > > Received: from pool-151-197-42-234.phil.east.verizon.net > ([151.197.42.234]) > > by ns1.ssc-isp.net (NAVGW 2.5.2.9) with SMTP id M2003062919024112450 > > for <[EMAIL PROTECTED]>; Sun, 29 Jun 2003 19:02:41 -0700 > > Received: from ulz.czmwa18.com ([48.0.218.172]) by > > pool-151-197-42-234.phil.east.verizon.net with ESMTP id 02267134 for > > <[EMAIL PROTECTED]>; Sun, 29 Jun 2003 23:09:03 -0400 > > Message-ID: <[EMAIL PROTECTED]> > > From: "" <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > > Subject: Re: we are ready > > Date: Sun, 29 Jun 03 23:09:03 GMT > > X-Mailer: Microsoft Outlook Express 5.50.4522.1200 > > MIME-Version: 1.0 > > Content-Type: multipart/alternative; > > boundary="F47C_0_E306..146_" > > X-Priority: 3 > > X-MSMail-Priority: Normal > > X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken > mail client > > [8010000e]. > > X-Declude-Sender: [EMAIL PROTECTED] [151.197.42.234] > > X-Note: This E-mail was scanned by Declude JunkMail > (www.declude.com) for > > spam. > > X-Spam-Tests-Failed: BADHEADERS, IPNOTINMX, WEIGHT5 [5] > > X-Note: This E-mail was sent from > pool-151-197-42-234.phil.east.verizon.net > > ([151.197.42.234]). > > X-Spam-Prob: 0.901467 > > X-RCPT-TO: <[EMAIL PROTECTED]> > > Status: R > > > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > > > Sent: Tuesday, July 01, 2003 4:15 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] Does Declude Work With IMail Relaying? > > > > > > > > > > > > >Well, the domain names for the mail which we are going to be > > > relaying mail > > > >over to our Exchange Server are NEXUSTECHGROUP.COM, NEXUSTECHLTD.COM > and > > > >NEXUSTECHNOLOGYGROUP.COM. Currently, NEXUSTECHGROUP.COM is set > > > up in IMail > > > >as the primary domain name and NEXUSTECHLTD.COM and > > > NEXUSTECHNOLOGYGROUP.COM > > > >are host aliases off of the site. We do use per-domain > > > filtering currently > > > >for NEXUSTECHGROUP.COM, which, since they are host aliases, also > includes > > > >the other 2 domains. Does that mean we can still manage any > > > spam filtering > > > >for that domain as we have been, i.e. with the > > > >\declude\nexustechgroup.com\$default$.junkmail? > > > > > > Actually, just to make things more confusing, IMail won't perform the > > > domain translation for gateway E-mail, so you would need > separate config > > > files for each domain. > > > > > > >If "per-domain" configuration allows me to treat relayed domains > > > as if they > > > >are local domains do I now have to setup > > > >\declude\nexustechltd.com\$default$.junkmail and > > > >\declude\nexustechnologygroup.com\$default$.junkamil for the > > > other 2 domain > > > >names, where before I was depending on the NEXUSTECHGROUP.COM to > > > do the work > > > >for all three of them because 2 were host aliases? > > > > > > Correct. However, you could use the REDIRECT command to get around > this, > > > by having the following lines in the \IMail\Declude\global.cfg file: > > > > > > REDIRECT @nexustechltd.com > > > C:\IMail\Declude\nexustechgroup.com\$default$.JunkMail > > > REDIRECT @nexustechnologygroup.com > > > C:\IMail\Declude\nexustechgroup.com\$default$.JunkMail > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. > > > Declude Virus: Catches known viruses and is the leader in mailserver > > > vulnerability detection. > > > Find out what you have been missing: Ask for a free 30-day evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
