About a year ago, I wrote a C++ (no external dependencies) external-plus (whitelist/blacklist) add-in for Declude that supports the following:
1. Whitelist / Blacklist at company level. 2. Whitelist / Blacklist at user level (has support for aliases via redirection) 3. Whitelist / Blacklist at a group level (supported by redirection) 4. Includes validating recipients (If there is one valid recipient, then the message is allowed) The program supports filtering the to, from and subject fields, as well as, IP addresses in the headers. For the to, from and subject fields, the software supports matching using StartsWith, EndsWith, Contains, is (equal), NotStartsWith, NotEndsWith, NotContains, IsNot and Regex For IP addresses, it supports the following formats: single address (192.168.1.3) and multiple addresses (192.168.1.3\255.255.255.255 [single address], 192.168.1.3\32 [single address], 192.168.1\255.255.255.0 [single class "C"] or 192.168.1.5\24 [single class "C"] or 192.168.1.5\255.255.255.254 [two class "C" ranges] or 192.168.1.5\25 [two class "C" ranges] and so on. It also has a valid recipient list for the domain and has full logging capabilities. Like others we are also preprocessing our email and we are using "xWall". Using xWall, it blocks in over 90% of our incoming email. If any one is interested in the software, please let me know and I would be glad to share it. David Cornerstone Computer Solutions, Inc. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Cummins Sent: Saturday, December 30, 2006 2:35 PM To: [email protected] Subject: RE: [Declude.JunkMail] Valid Senders - Best Declude Practices > 5XXSink is a connection-time event sink for MS SMTP This sounds like an interesting tool. What if I can only apply it to some domains though? If I set this up on the same box as SmarterMail, and used the MS SMTP to forward to SmarterMail (what, on a different port I guess?) then am I correct in guessing that I have to have a comprehensive list of all recipients? I don't think I'll be able to get all the Exchange Servers I service to play nice right away. > OTOH, if you were using IMail as the MTA wrapper for Declude, it > would be possible to do all this stuff natively within IMail by using > a "smart store-and-forward" setup and some sync scripts for your S&F > domains. > > The same logic seems possible for SM, and would certainly be the "best > way" in theory; but if you've already probed their forums, I assume > there's no established "cookbook" from that side. I'm pretty sure that Declude processes the traffic before the IMail product, so I need to nab it before it gets to Declude if I'm going to trim my resources. I'm not sure about SmarterMail, but I suspect the same. MSG gets handed to Declude, which calls up Sniffer and invURIBL, and then tosses it back into the MTA queue for mail handling. Unless I'm wrong, in which case I'll get tapped back in line. :) In iMail you set up Store and Forward by entering the IP in the SMTP security, and then making an entry in the Windows Host file. In SmarterMail you just enter the IP/domain name in "Domain Forwarding" - no place to really put any e-mail addresses for either product, that I know of anyway. :( You know, Declude Pro handles a whitelist.txt and a blacklist.txt on a per domain config. It might be nice to have a validRecipients.txt file too. Yeah, it's sort of useless for POP/IMAP domains but it would sure be handy for store and forward relay. It would really cut down on my resource load if that could be one of the first tests processed, so all the other little engines don't have to waste their time. > --Sandy Thanks for your input, Sandy! You too, Markus, Mark and Herb. Alligate looks like an impressive gateway product, I'll keep it in mind - and I'm thinking of upgrading the hardware on that box now as well. It wasn't all that shabby to begin with though. -- Michael Cummins ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/rel ease / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/dow nloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/downloa d/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
