Unless you have Connection Filtering (or SPF) deleting the message, it is still passed to Declude. If you don't want Declude's notifications, I'm sure there is a way to turn them off. If not, setup a rule in IMail that will delete them.
Have a good one, Christian -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Friday, June 24, 2005 12:25 AM To: [email protected] Subject: Re: [IMail Forum] Block messages that claim to come from my domain The notification that Declude sends out to me does not contain X-IMAIL-SPAM-VALFROM (which makes sense, since it's just a notification, not the original email). I just want the notifications to go away, which should happen if the VALFROM command is processed first, but this doesn't seem to be the case. Thanks Christian Lawson wrote: >Declude runs after the VALFROM check is processed, but Declude may be setup to >not deliver the message to you. Check the headers of >the message (if you can). If you see an X-IMAIL-SPAM-VALFROM header, then the >'verify mail from address' check is working. > >Have a good one, >Christian > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers >Sent: Thursday, June 23, 2005 3:21 PM >To: [email protected] >Subject: Re: [IMail Forum] Block messages that claim to come from my domain > >We use Declude (AV and JM). We don't whitelist our domain or the IP. >But maybe it has to do with the processing order. We get a bunch of >notifications (from Declude AV) about these attempts to send viruses, so >perhaps Declude is running before the Verify MAIL FROM command, and >sending out the notifications. We are not actually receiving the >messages. I should've mentioned that. > > > >Christian Lawson wrote: > > > >>Are you whitelisting the connecting IP or did you whitelist your domain? >> >>Have a good one, >>Christian >> >>-----Original Message----- >>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers >>Sent: Thursday, June 23, 2005 2:25 PM >>To: [email protected] >>Subject: Re: [IMail Forum] Block messages that claim to come from my domain >> >>I checked the Verify MAIL FROM address and I still get messages sent >> >> >>from invalid accounts on my domain. I do not have a nobody alias. I > > >>restarted the QM and SMTP services after the change....any ideas? >> >>Kevin >> >> >>Christian Lawson wrote: >> >> >> >> >> >>>Two Antispam settings: SPF or enable the 'Verify MAIL FROM address' check. >>> >>>Have a good one, >>>Christian >>> >>>-----Original Message----- >>>From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Smith >>>Sent: Monday, June 20, 2005 9:55 AM >>>To: Imail Forum >>>Subject: [IMail Forum] Block messages that claim to come from my domain >>> >>>Is there a way to block all messages that are "from" my domain but are not >>>valid accounts or aliases setup in my domain? We've been getting a lot of >>>infected zip files lately that are claiming to come from email addresses >>>that don't exist in our domain. I realize that I can just explicitly block >>>those that I've identified, but I want to know if there's a way to block >>>future ones as well without explicitly knowing what they are. >>> >>>Thanks, >>> >>>Scott Smith >>>Network Administrator >>>248.489.1999 >>>[EMAIL PROTECTED] >>> >>>Westside & Detroit Reprographics >>>An ARC Company >>>------------------------------------------------- >>> >>> >>> >>>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >>> >>> >>>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >>>--- >>>[This E-mail was scanned for viruses.] >>> >>> >>> >>> >>> >>> >>> >>> >>> >>--- >>[This E-mail was scanned for viruses.] >> >> >>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >> >>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >>--- >>[This E-mail was scanned for viruses.] >> >> >> >> >> >> >> >--- >[This E-mail was scanned for viruses.] > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >--- >[This E-mail was scanned for viruses.] > > > > > --- [This E-mail was scanned for viruses.] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
