Wrong - it failed the validation from address.  That is not content
filtering.

See this line:
>(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx

That is NOT a content filter.

Travis

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle
Sent: Thursday, July 22, 2004 10:02 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Whitelist entry

Yes, on the Trusted Addresses Tab of Anti-Spam I have the "Apply to content
filtering only" checked.

"Apply to Content Filtering Only. If this option is selected, messages from
the domains/e-mail addresses on this tab will only bypass content
filtering. If this option is cleared, messages from the domains/e-mail
addresses on this tab will bypass both content and  connection filtering."

Which is what I want so that a message still has to go through connection
filtering (DNS Blacklist and Verify MAIL FROM address).  Hoping that will
help act as a simple barrier to someone "spoofing" an email with a fake
return address.

The message was caught for a content filter violation which the settings
should have caused it to be excepted from. Hence my question.

At 09:22 AM 7/22/2004, you wrote:
>Do you have the checkmark in "Apply to Content Filtering Only" for the
>whitelist?
>
>Travis
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle
>Sent: Thursday, July 22, 2004 9:12 AM
>To: [EMAIL PROTECTED]
>Subject: [IMail Forum] Whitelist entry
>
>I have a particular domain entered in our whitelist but it does not seem to
>be working.
>
>The whitelist contains.
>
>alloweddomain.com
>
>but here is an excerpt log entry where it an email from that domain was
>caught.
>
>07:22 06:56 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION:
>(MAIL FROM) ourdomain.net validating MAIL FROM address
>[EMAIL PROTECTED]
>07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION:
>(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx
>07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION:
>(MAIL FROM) ourdomain.net SUCCEEDED for user
>[EMAIL PROTECTED]
>07:22 06:57 SMTP(c450161901227ccf) Got Content Filter for ourdomain.net
>07:22 06:57 SMTP(c450161901227ccf) scanning the subject for phrases
>07:22 06:57 SMTP(c450161901227ccf) scanning the body for phrases
>07:22 06:57 SMTP(c450161901227ccf) matched phrase [some banned phrase]
>
>do I need to have the whitelist entry be
>
>mail.alloweddomain.com
>
>
>
>
>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
>
>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to