Hello, All,
I had a few questions about Kami's Declude setup which you can view at her
normal FTP site.  I thought maybe others who have taken a look at it (or
even Kami herself) could answer a couple of questions I had.

1)  WHITELIST REVDNS in the GLOBAL.CFG file

I'm starting to adopt this idea in my own Declude setup.  Prior to this I
was using a custom filter I created called MAILFROM which looked for certain
strings in the sender and would subtract a few points to get problem senders
to get in under my hold weight.  I really like this idea and think it's a
more elegant solution than my MAILFROM solution.  But I still had a couple
of questions...

a)  Is it possible that someone who controls the Reverse DNS for a set of
Spam IP addresses could put legit domain names in their PTR records,
basically subverting this?  Or is this a test that can't be gotten around?
I have a feeling it can be subverted but I want to make sure.

b)  Is having the WHITELIST REVDNS in the GLOBAL.CFG file the only way to do
this?  Or can that set of strings be offloaded into a separate text file as
I do with some of the filters?  I have a feeling the answer is no, that it
must be done within GLOBAL.CFG but I just wanted to make sure.

2)  WHITELIST HELO in the GLOBAL.CFG file

I also like this solution as well.  My question is how do I figure out what
string they used in the HELO part of the SMTP conversation?  What changes
would I need to make to my GLOBAL.CFG to add the header which would give me
that info?

I think that's about it for now.

I appreciate any and all feedback.

Thanks In Advance,
Dan Geiser <[EMAIL PROTECTED]>

-----------------------------------------------------------------------
Sign up for virus-free and spam-free e-mail with Nexus Technology Group 
http://www.nexustechgroup.com/mailscan

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to