Actually, it's missing out on the phrases, dnsbl, urlbl, and even the statistics. It basically continues on to delivery despite being tagged by various components of the antispam as spam. What I've done and it seems to be working rather well, is that I have set up inbound rules for each domain (one rule per domain) so that anything with the anti-spam x-headers ends up in the same catchall account as normally filtered spam. It managed to cut down the spam load on the client side to nearly nothing. This has actually allowed me to use a feature the iMail Anti-Spam lacks, the ability to review dns blacklisted emails just like any other. I can't believe how out of control this spam problem is, just yesterday the server processed 23K total emails, 5K of that was spam. I'm sure other companies have it worse, but yikes!
Sam -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, November 20, 2003 10:17 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] IMail Antispam not filtering emails forwarded between domains. >My guess here is that you are using DNS blacklists to do most of the >filtering. The problem is that for forwarded mail, the last IP address on >the message is the forwarding server, NOT the spammer's server. We have >this same problem in house. > >I wish there was a way to scan ALL the IP addresses in the message, not >just the connecting server. Does Declude do this? Yes, Declude JunkMail lets you do this. The default setting is to only scan the IP that connects to the IMail server, but there is a lot of flexibility for scanning other IPs (such as scanning all IPs that the E-mail travels through, just bypassing the IPs of your gateway/backup mailservers, or just scanning up to one hop away from your server). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
