Declude runs after the VALFROM check is processed, but Declude may be setup to not deliver the message to you. Check the headers of the message (if you can). If you see an X-IMAIL-SPAM-VALFROM header, then the 'verify mail from address' check is working.
Have a good one, Christian -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Thursday, June 23, 2005 3:21 PM To: [email protected] Subject: Re: [IMail Forum] Block messages that claim to come from my domain We use Declude (AV and JM). We don't whitelist our domain or the IP. But maybe it has to do with the processing order. We get a bunch of notifications (from Declude AV) about these attempts to send viruses, so perhaps Declude is running before the Verify MAIL FROM command, and sending out the notifications. We are not actually receiving the messages. I should've mentioned that. Christian Lawson wrote: >Are you whitelisting the connecting IP or did you whitelist your domain? > >Have a good one, >Christian > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers >Sent: Thursday, June 23, 2005 2:25 PM >To: [email protected] >Subject: Re: [IMail Forum] Block messages that claim to come from my domain > >I checked the Verify MAIL FROM address and I still get messages sent >from invalid accounts on my domain. I do not have a nobody alias. I >restarted the QM and SMTP services after the change....any ideas? > >Kevin > > >Christian Lawson wrote: > > > >>Two Antispam settings: SPF or enable the 'Verify MAIL FROM address' check. >> >>Have a good one, >>Christian >> >>-----Original Message----- >>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith >>Sent: Monday, June 20, 2005 9:55 AM >>To: Imail Forum >>Subject: [IMail Forum] Block messages that claim to come from my domain >> >>Is there a way to block all messages that are "from" my domain but are not >>valid accounts or aliases setup in my domain? We've been getting a lot of >>infected zip files lately that are claiming to come from email addresses >>that don't exist in our domain. I realize that I can just explicitly block >>those that I've identified, but I want to know if there's a way to block >>future ones as well without explicitly knowing what they are. >> >>Thanks, >> >>Scott Smith >>Network Administrator >>248.489.1999 >>[EMAIL PROTECTED] >> >>Westside & Detroit Reprographics >>An ARC Company >>------------------------------------------------- >> >> >> >>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >> >>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >>--- >>[This E-mail was scanned for viruses.] >> >> >> >> >> >> >> >--- >[This E-mail was scanned for viruses.] > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >--- >[This E-mail was scanned for viruses.] > > > > > --- [This E-mail was scanned for viruses.] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
