The IP of our secondary mail server is 67.17.218.70. I received a message that had its IP put in as the hostname. So Declude saw this IP and whitelisted. I'll type a couple lines of the headers:
Received: from secmail.crescentdigital.com [67.17.218.70] by mail.crescentdigital.com with ESMTP (SMTPD32-6.06) id ADFD3B007E; Fri, 14 Nov 2003 08:51:57 -0500 Received: from 67.17.218.70 ([211.219.196.240]) by secmail.crescentdigital.com (8.12.8/8.12.5) with SMTP id hAEEpdwo012904; Fri, 14 Nov 2003 09:51:41 -0500
Declude JunkMail won't see 67.17.218.70 as the IP address of the remote mailserver because it was in the "Received: from 67.17.218.70" header.
If you are using "IPBYPASS 67.17.218.70" (which you must to properly scan spam), then Declude JunkMail saw the remote IP as 211.219.196.240, and the HELO as 67.17.218.70. With "WHITELIST IP 67.18.218.0/24", this E-mail would not be whitelisted.
If you are *not* using "IPBYPASS 67.17.218.70", then Declude JunkMail would see the remote IP as 67.18.218.70 (since that *is* the IP that connected to IMail), and the HELO as secmail.crescentdigital.com. In this case, "WHITELIST IP 67.18.218.0/24" would whitelist the E-mail.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
