Hi Dave, We've always let the message get delivered to everyone. So far no complaints.
The only real problem we've had with whitelisting is with auto whitelisting from webmail contact lists. While this is a useful feature, it does result in spam getting through that forges the users address. It would be preferable if some tests could be exempted from whitelisting, or even better, instead of whitelisting applying a negative weight to messages from the webmail contact list. That way SPF FAIL could still filter out forging spam, while contact list whitelisting/negative weighting could allow everything else through. Darin. ----- Original Message ----- From: "Dave Beckstrom" <[EMAIL PROTECTED]> To: <declude.junkmail@declude.com> Sent: Tuesday, October 17, 2006 8:13 PM Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude? Hi Darin, Thanks for the great explanation. You always offer good feedback. Thanks to everyone else who replied, too. Which is the lesser of two evils -- Whitelist email to all recipients even though only one recipient is in the whitelist; or ignore the whitelist request entirely if the email has multiple recipients and only one of whom is in the whitelist? > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Tuesday, October 17, 2006 2:37 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude? > > It's actually more of an issue of how the mail server handles the message. > In the case of multiple recipients, since there is only one message file > addressed to multiple recipients in the headers, it's either deliver or not > deliver unless you rewrite the headers to modify the recipient list. I > think I'd rather not have the spam filtering system alter that. Add to the > header, yes. Alter the recipients, no. > > Also, I have not come across a situation where I wanted to let a message go > through to one recipient and not to others, except in the situation of lists > which is a whole other topic. > > Darin. > > > ----- Original Message ----- > From: "Dave Beckstrom" <[EMAIL PROTECTED]> > To: <declude.junkmail@declude.com> > Sent: Tuesday, October 17, 2006 3:11 PM > Subject: RE: [Declude.JunkMail] Whitelisting flaw in Declude? > > > I would call that a flaw, then, in how Declude processes the whitelist. > > I have a listserver email address for which I do not want email spam > checked. This is because I don't want messages going out to the list that > say SPAM in the subject line. Because nobody who is not a member on the > list can post to the list, there is no problem whitelisting the "TO" address > for mail sent to the list server email address. > > However, spammers will send an email to a dozen of our mail addresses (12 > recipients) one of which is the whitelised "TO" address for the listserver. > Because of the way Declude processes the whitelist, that means that the > other 11 recipient receive the spam even though mail to them is not > whitelisted. > > That is a bad design on Declude's part, wouldn't you agree? Anyone else > feel that this needs to be rectified? > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Darrell > > ([EMAIL PROTECTED]) > > Sent: Tuesday, October 17, 2006 11:25 AM > > To: declude.junkmail@declude.com > > Subject: Re: [Declude.JunkMail] Whitelisting flaw in Declude? > > > > If one user is whitelisted they all will be whitelisted for that email. > > There are some things you can do to prevent this like BYPASSWHITELIST > test. > > > > Darre;; > > > > ------------------------------------------------------------------------ > > Check out http://www.invariantsystems.com for utilities for Declude And > > Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, > MRTG > > Integration, and Log Parsers. > > > > ----- Original Message ----- > > From: "Dave Beckstrom" <[EMAIL PROTECTED]> > > To: <declude.junkmail@declude.com> > > Sent: Tuesday, October 17, 2006 11:18 AM > > Subject: [Declude.JunkMail] Whitelisting flaw in Declude? > > > > > > If an email is received that is addressed to multiple recipients, one of > > whom is whitelisted, does Declude treat the email as whitelisted for all > > recipients? > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
