Hi, [......] > This E-mail actually came from 68.251.177.107. That IP *may* have received > it from 222.126.26.96, but unless you can trust that IP, you have to assume > that it really came from 68.251.177.107. > > One option here would be to use a line "HOPHIGH 2" in your > \IMail\Declude\global.cfg file, which would scan the first two hops, which > would also cause the 222.126.26.96 IP to be scanned.
Hold on, maybe I have misunderstood the hophigh feature all this time. Do you mean to say that by using hophigh 2 I test all ip-numers in the first *and* in the second hop? I could definitely use that feature as I have mail forwarded to me from the ISP that we get some of our (consumer) ADSL connections from. They sent any info regarding a connection to the e-mail address corresponding with that connection. Of course I have all those adresses forwarded to me but there is also a lot of spam coming from those adresses. As they have a massive mailserver farm it is impossible for me to list all mailservers in my ipbypass list. If hophigh is doing what I think you said I can suddenly enable all ip based tests on those forwarded mails by increasing the hophigh count. Groetjes, Bonno Bloksma .... Back up my hard drive? How do I put it in reverse? --- [E-mail scanned at tio.nl for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
