Well I do see what you mean.  This is interesting.. Doing a mail test via
http://www.dnsreport.com/tools/[EMAIL PROTECTED] shows two
different mail servers in anyway.

HTH,

~Rick

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Robert Grosshandler
> Sent: Saturday, January 17, 2004 11:17 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Whitelist strategy needed
> 
> 
> I can't tell if they actually control that IP.  If they did, 
> I guess I could.
> 
> --------------
> 
> -Would adding 66.207.130.10 into your host antispam trusted 
> ip addresses work?
> 
> ~Rick
> 
> 
> > Due to the nature of our business (online retail), we get 
> some e-mail 
> > that triggers most content driven spam tests (alligate, 
> > nolegitmatecontent, and sniffer).  But, we NEED that e-mail.
> > 
> > We receive one frequent type of e-mail from a company that doesn't 
> > have its act together, so I need to figure out a way to whitelist 
> > them, without opening up the floodgates.  While the mail is sent by 
> > one company (befree), the mail actually is being sent on behalf of 
> > others (gardenerseden in this case). The mail fails enough test to 
> > exceed my delete weight.
> > 
> > Here is a typical header:
> > 
> > Received: from pg1bms01.befree.com [66.207.130.10] by 
> smtp.igive.com 
> > with ESMTP
> >   (SMTPD32-8.05) id A96510EC0030; Thu, 15 Jan 2004 02:03:49 -0600
> > Received: from pg1bms01.befree.com (localhost [127.0.0.1])
> > by pg1bms01.befree.com (8.8.8p2+Sun/8.8.8) with ESMTP id
> > DAA20797 for <[EMAIL PROTECTED]>; Thu, 15 Jan 2004 03:04:19 
> -0500 (EST)
> > Date: Thu, 15 Jan 2004 03:04:19 -0500 (EST)
> > Message-ID: 
> > <[EMAIL PROTECTED]>
> > From: [EMAIL PROTECTED]
> > To: <[EMAIL PROTECTED]>
> > Subject: Gardeners Eden Affiliate News
> > Mime-Version: 1.0
> > Content-Type: multipart/alternative; 
> > boundary="----=_Part_113_4670443.1074153859335"
> > 
> > This IP doesn't have a reverse dns.  Just whitelisting 'befree.com' 
> > doesn't work well, because there is a lot of spam that 
> contains that 
> > phrase.
> > 
> > Thoughts welcomed.  I know there is something easy to set 
> up, but I'm 
> > blanking at the moment.
> > 
> 
> ___________________________________________________________________
> Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.


___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to