John Martoccio said:
> THIS COULD BE A BIG PROBLEM !
>
> Here I thought I found the "holy grail" of email....in TrashFinder !
I love
> the Exceptions Pass filter (which I call the PASS-THROUGH filter to my
clients),
> and have been relying on it heavily. Only an extremely small amount of
valid mail
> is getting caught daily, as a result of fully utilizing it.
I use the No-Delete filters extensively (including the Subject one I was
talked into adding. You'll get it in the next version of TF. If it ever
stops Dr. Watsoning. :-). But I don't use Pass because it turns off too
much.
> What could be done to effectively do what your suggesting, is add another
field
> "Authenticate" ...
Add it to what??
>...where if blank, would not require the sending server to be a specific
criteria
> (i.e. ameritech.net or an IP), but if the field is filled in, then not
only would
> the [EMAIL PROTECTED] be allowed in to pass messages, but the Authenticate
field would
> also have to match. This could be done, with some programming work, if you
used the
> top DNS authentication line in the header (the one that is looked up), to
match to.
You mean the "received:" line added by SMPTRCV? That's the only trustworthy
one.
> If the person is a roaming server, then they would need an entry for each
> authenticate, and the program would need to keep looking for more matching
> users to authenticate against.
Now you've lost me completely.
> If this isn't done, this could potentially allows spammers to RELAY using
the
> "From:" address as the entry into our systems, and they could either "CC:
or BCC:"
> to all of their mailing list !
I think that SMPTRCV would prevent the relaying (at least I *hope* it does).
But you're going to see more "whitelist" spam, because so many systems are
using whitelists to filter spam. (I saw a TV ad this morning for Earthlink
touting their whitelist filter. On such systems, the only way to get spam
delivered is to fake its source as someone on the whitelist. And you better
believe that spammers are going to try to get it through.)
> This could be a plug-in of it's own, instead of part of Trashfinder, but
it would be
> a hell of a lot more convenient to enter the information into the same
place !
That's true. TF is turning into the kitchen sink of plugins. :-)
> At this point, I want to hear Randy's thoughts.....
If I understood your idea better, I'd probably be able to say something more
intelligent.
Randy.
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
