>We are setup using Imail 6 and Webshield on the same server. Unfortunately
>I have to rely on Webshield for stopping spam relay. I have noticed in my
>logs that it appears that legitimate e-mail is being stopped due to a
>"SPAM-Relay detected".
WebShield does that when you give it a specific group of "safe" IP
addresses that are allowed to relay, but someone tries relaying from
another IP address.
>The same outside user was blocked from sending mail to one of my users and
>then was accepted to another one of my users.
Then it sounds like WebShield knows the domain of one of the users, but not
the other. You need to let it know about all domains that IMail serves,
plus an extra copy of each with a "." at the end to prevent a nasty DOS
attack (IE if you have "example.com", also add "example.com.").
> I have enclosed a copy of the log. Anyone know of anything that would
> cause this? I am running Webshield 4.5 mr1a and Imail 6.0.2.
>
>Thu Jan 03 06:54:50 2002 MAIL DENIED ACCESS (SPAM-Relay detected):
> Received from IP Address: 204.151.230.22 (External)
> Supposed sender: <[EMAIL PROTECTED]>
> Recipient list: <[EMAIL PROTECTED]>
>
>Thu Jan 03 06:57:31 2002 MAIL RECEIVED:
> Received from IP address: 204.151.230.22 (External)
> Sender: <[EMAIL PROTECTED]>
> Recipient list: <[EMAIL PROTECTED]>
This is strictly a WebShield issue, but it looks like it recognizes
"stevenstransport.com" as a valid local domain, but does not recognize
"mail.stevenstransport.com". So you'll need to add both
"mail.stevenstransport.com" and "mail.stevenstransport.com." to WebShield's
list of domains that it treats as local.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
