OK, I have an idea. Scott, can we "disable" HOLD1, and if so would that affect HOLD2 operation?
99.5% of messages held by HOLD1 end up passing. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of George Kulman > Sent: Saturday, December 06, 2003 1:36 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Hijack Question > > John, > > This is probably more than you wanted but I didn't want to post Scott's > explanation out of context. > > I had a HiJack / Junkmail situation in August. This related to mail where > I > am the secondary MX. HiJack was doing a very effective job of trapping > volume SPAM but I noticed that SPAM was slipping through after being > released from HOLD1 and even in the process of being transferred to HOLD2. > > I had an off-line exchange with Scott and according to him, under these > circumstances, the mail released from HOLD1 will NOT be processed by > JunkMail. Here's Scott's explanation: > > Declude Hijack is involved with these E-mails because IMail reports them > as > external addresses, so Declude Hijack sees E-mails to these domains as > being outgoing mail (when in reality they are incoming mail). As a > result, > if someone sends too much E-mail from one IP to these domain(s), it will > be > held. That's an interesting side-effect that we had not anticipated. > > We did decide to have Declude Hijack take priority over Declude JunkMail, > because it would save a lot of CPU time during attacks, and the thought > was > that outgoing E-mail would not need to be scanned by Declude JunkMail. > > Scott, in response to a follow up message stated that the email would be > Virus scanned. > > Unfortunately, this caused me to discontinue using HiJack since the spam > handling was more important than the CPU cycles saved by having HiJack > trap > the spam up front. Really too bad, it was catching a lot of spam. > > George > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of John > > Tolmachoff (Lists) > > Sent: Saturday, December 06, 2003 2:02 AM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] Hijack Question > > > > > > When Hijack releases a message from HOLD1, does it go right > > back to spool, > > or does it then get scanned for Virus and JunkMail? > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
