I have been receiving many messages that are not being caught by Junkmail and are not failing any tests. They are most certainly SPAM and are more than a little obnoxious. I want to blacklist messages of this kind, but want to be completely sure which is the best way. As an example, I have the following line for X-Declude-Sender:
X-Declude-Sender: [EMAIL PROTECTED] [24.243.227.175]
In the past, I have blacklisted [EMAIL PROTECTED], but the IP address given actually resolves to cs24243227-175.austin.rr.com. Should I be blacklisting the sender or actual resolved address OR both??
The IP blacklists ("ipfile" test type in the global.cfg file) only block IPs, and the sender blacklists ("fromfile" in the global.cfg file) only work on the return address. So you could add 24.243.227.175 to an IP blacklist, or you could add [EMAIL PROTECTED] to a sender blacklist.
If you are running Declude JunkMail Pro, you could also add a filter that would block the reverse DNS entry of cs24243227-175.austin.rr.com.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
