Hi Russ,

The way we are implementing spam control for our wireless clients is
we have a freebsd box before the NAT device that does port forwarding on port 25 to 
sendmail
(to catch the internal ip) then send the email to imail gateway.  The
imail gateway now see the NAT device as the source of the email but
will also see the internal IP (added by sendmail).

example of header from the imailgateway:
Received: from nat_device.com [209.53.208.35] by xxxxxxx with ESMTP
  (SMTPD32-7.15) id A7639E40108; Thu, 14 Oct 2004 11:37:23 -0700
Received: from client_internal_ip ([10.100.23.235])
        by xxxx (8.12.8/8.12.8) with ESMTP id i9EJt8FE058679

My feature request for Hijack is to monitor/control on the
client_internal_ip, BYPASSing the nat_device IP.
        

Tito


>Thursday, October 14, 2004, 11:08:22 AM, you wrote:

> John Tolmachoff (Lists) wrote:
>> Multiple users behind a NAT device using your e-mail server at another
>> location.
>> 
>> On of those users starts send out spam. Your e-mail server will see the
>> connection coming from the public IP of the NAT device as opposed to the
>> client IP of the workstation. Declude Hijack looks at the IP that Imail
>> received it from, hence the NAT device.

> Exactly what I was saying :)  Therefore, IPBYPASS would hold 0 value in
> this scenario, because IMail/Declude are only going to see the IP addy
> from the NAT device.  There is no way that I can think of to get IMail
> to see the IP address of the device behind the NAT device.

> -Russ
> ---
> [This E-mail scanned for viruses by Declude Virus]

> ---
> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to