We are running SmarterMail 2.5 and came across the same problem. Any time our customers were on a dynamic spamlisted IP, their email to others in their office would get held as spam. Needless to say, this didn't go over well. We fixed the problem with SPF. We run the SPF FAIL test, and then we have a custom filter.
In global.cfg: SPFFAIL spf FAIL x 30 0 ... LOCALDOM filter [declude path]\Filters\LocalDom.txt x 0 0 In LocalDom.txt: TESTSFAILED END CONTAINS SPFFAIL MAILFROM -300 ENDSWITH ourdomain1.com MAILFROM -300 ENDSWITH ourdomain2.com etc... The logic is that all of our domains have a functional SPF record. Therefore, any mail sent from one of our domains will have 300 points taken off its score (essentially a whitelist in our scoring). If someone spoofs one of our domains as the sender, it fails SPF, so the LocalDom test stops at the first line. This seems to be working well (only b/c we have SPF), but we'll be very happy when the SmarterMail upgrade comes out that relays the authenticated user info to Declude. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Thursday, May 05, 2005 7:44 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Outbound Scanning That would be awesome. We're planning a switch to SmarterMail soon so it may be a non issue in the near future if they implement it. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ] > Sent: Thursday, May 05, 2005 6:48 AM > To: Declude.JunkMail@declude.com > Subject: Re: [Declude.JunkMail] Outbound Scanning > > Evans, > > We have this on a list of possible enhancements for the very near future. > It > would, however, be a global setting that applies to the entire server: > scanning inbound only, outbound only or both. > > David Franco-Rocha > > ----- Original Message ----- > From: "Evans Martin" <[EMAIL PROTECTED]> > To: <Declude.JunkMail@declude.com> > Sent: Thursday, May 05, 2005 2:11 AM > Subject: RE: [Declude.JunkMail] Outbound Scanning > > > Because I'm running 7.15 of IMail. > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Darin Cox > > Sent: Wednesday, May 04, 2005 6:57 PM > > To: Declude.JunkMail@declude.com > > Subject: Re: [Declude.JunkMail] Outbound Scanning > > > > If you have Pro, why don't you turn AUTOWHITELIST ON? That way anyone > who > > authenticates is whitelisted. > > > > Darin. > > > > > > ----- Original Message ----- > > From: "Evans Martin" <[EMAIL PROTECTED]> > > To: <Declude.JunkMail@declude.com> > > Sent: Wednesday, May 04, 2005 7:16 PM > > Subject: RE: [Declude.JunkMail] Outbound Scanning > > > > > > I'm talking about Junkmail; not Virus. I'm marking my own outbound mail > > as > > spam in a lot of cases. I want to disable this behavior. > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Jonathan > > > Sent: Wednesday, May 04, 2005 6:13 PM > > > To: Declude.JunkMail@declude.com > > > Subject: Re: [Declude.JunkMail] Outbound Scanning > > > > > > I think you're looking for virus_domains.txt - it has inbound only, > > > outbound only, both, etc options. > > > > > > Jonathan > > > > > > > > > Evans Martin wrote: > > > > > > >So there is no way to turn off outbound scanning? > > > > > > > > > > > > > > > >>-----Original Message----- > > > >>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > >>[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > > > >>Sent: Wednesday, May 04, 2005 4:41 PM > > > >>To: Declude.JunkMail@declude.com > > > >>Subject: RE: [Declude.JunkMail] Outbound Scanning > > > >> > > > >>Then they need to auth to the server. You need 8.x to be able to > have > > > >>declude > > > >>know if the user has authed just set WHITELIST AUTH in yor > > > >> > > > >> > > > >global.cfg > > > > > > > > > > > >>Kevin Bilbee > > > >> > > > >> > > > >> > > > >>>-----Original Message----- > > > >>>From: [EMAIL PROTECTED] > > > >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans > Martin > > > >>>Sent: Wednesday, May 04, 2005 2:24 PM > > > >>>To: Declude.JunkMail@declude.com > > > >>>Subject: [Declude.JunkMail] Outbound Scanning > > > >>> > > > >>> > > > >>>I am trying to disable outbound scanning of my domains. I > > > >>>commented everything out in the slightly modified from default > > > >>>global.cfg that came after the outbound section using a # but it > > > >>>still seems to be scanning outbound. > > > >>> > > > >>>I am using per domain configs but I don't see where Declude is > > > >>>being instructed to scan outbound. Many of my users are > > > >>>complaining because their mail goes out tagged as spam. Help! > > > >>> > > > >>>Thanks, > > > >>>Evans Martin > > > >>>--- > > > >>>This E-mail came from the Declude.JunkMail mailing list. To > > > >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > >>>type "unsubscribe Declude.JunkMail". The archives can be found > > > >>>at http://www.mail-archive.com. > > > >>> > > > >>> > > > >>> > > > >>--- > > > >>This E-mail came from the Declude.JunkMail mailing list. To > > > >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > >>type "unsubscribe Declude.JunkMail". The archives can be found > > > >>at http://www.mail-archive.com. > > > >>--- > > > >>[This E-mail scanned for viruses by Declude Virus] > > > >> > > > >> > > > >> > > > > > > > > > > > > > > > >--- > > > >[This E-mail scanned for viruses by Declude Virus] > > > > > > > >--- > > > >This E-mail came from the Declude.JunkMail mailing list. To > > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > >type "unsubscribe Declude.JunkMail". The archives can be found > > > >at http://www.mail-archive.com. > > > > > > > > > > > > > > > > > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > --- > > > [This E-mail scanned for viruses by Declude Virus] > > > > > > > > > > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
