Scott- I think that I may misunderstand SPAMDOMAINS.
>From the manual: This test will catch E-mail that is not coming from a mailserver that it should be coming from. This test will only work if you set up a file listing domains that you wish to be included in this test. Specifically, it will check the return address of the E-mail, and then check to see if the reverse DNS entry of the IP that the E-mail was sent from contains the domain name. If not, the E-mail fails the test. For example, if "hotmail.com" is listed in the \IMail\Declude\spamdomains.txt file, then an E-mail coming from "law2.hotmail.com" would not fail the test, but an E-mail from "mail.example.ru" would fail the test. Taking the lead from that description, my SPAMDOMAINS file consists of a simple list of domains, one to a line, like this: ebay.com aol.com Yet every example I have seen on this subject the past few days shows two domains per line like this: @juno.com .untd.com How is this supposed to work? -Dave ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, April 15, 2004 4:42 PM Subject: Re: [Declude.JunkMail] why does this fail the spam domains test? > > >Can anyone explain why this message would fail the spamdomains test? > > > > > >Here is the spamdomains entry: > > > >@juno.com .untd.com > > The key here is the reverse DNS entry -- do you have the full headers for > the E-mail? Although the IMail log file shows the IP address, it is > possible that Declude JunkMail may have used a different IP, which would be > reflected in the headers. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
