Pete, Since Sniffer is used in Imail mainly for determining whether or not a mail should be deleted (not rejected), keeping such stuff out of your rules makes perfect sense. I think that deletion and rejection are like apples and oranges, to a certain extent. Both have their place. They work best in conjunction with one another, I feel. I don't believe that Sniffer even can be used in any MTA as a reject test, because it has to test the entire message. Please correct me if I am wrong on that one though.
Personally, I use Sniffer to filter stuff that has already made it through the envelope/reject check. It works great as part of a multi-layered defense. William Van Hefner Network Administrator Vantek Communications, Inc. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil > Sent: Thursday, March 24, 2005 7:20 AM > To: Len Conrad > Subject: Re[2]: [IMail Forum] reverse DNS > > > On Thursday, March 24, 2005, 9:57:51 AM, Len wrote: > > > <snip/> > > LC> FUD. Blocking by subscriber networks by PTR hostname is > extremely > LC> effective and efficient. > > I hate to step into this - but I thought that I might add a > useful data point. > > On several occasions I have added rules to SNF that matched > subscriber networks by RDNS. > > In every one of these cases I have had to remove these rules > due to false positive reports from customers. > > I no longer attempt this type of rule. > > I'm not saying that it should never be done - only that it is > an extreme approach that in my experience has has never been > satisfactory. > > _M > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
