[Declude.JunkMail] WHITELIST HELO- revisited
Title: Message Scott: You mentioned earlier that you do not think that WHITELIST HELO be something that should be used too often. Could you please elaborate on this. Why? Can HELO be faked easily? We deal with a lot with universities and government agencies as well as various clients with military emails in our engineering company. [.edu, .gov, .mil] We had added .gov as a WHITELIST. WHITELIST HELO .gov of course recently we found out something that caught my eyes. A junkmail got through with the following HELO something.gov.something Can the HELO have something like ENDSWITH so we can make sure this does not happen. This can also help with big companies that one does not get spam from. Microsoft.com, ibm.com, oracle.com, etc. the problem with current HELO is if I do: WHITELIST HELO .microsoft.com It will also whitelist .microsoft.comISNOT.biz Of course this all depends on your answer for why do you think this is not a good idea. Regards, Kami
RE: [Declude.JunkMail] Accounting for secondary MX
Sorry to that, but im curious, what brand of HD should we be avoiding? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua Levitsky Sent: Monday, June 02, 2003 3:16 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Accounting for secondary MX And I would have seen it too had I not spent the whole night rebuilding my server because my RAID array lost 2 of the 3 drives at the same time. Thanks for the info. -Josh On Sunday, June 1, 2003, at 06:42 PM, Sanford Whiteman wrote: > That feature already exists--has for quite a while--and is documented > in the manual! In GLOBAL.CFG: > > IPBYPASS your.backup.mx.ip --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Accounting for secondary MX
Thank you sooo much. I had a total failure of my RAID array on my mail server. I was up all night last night fixing it and when I replaced the drives, re-installed windows, restored from backup, and then got back online I found that I didn't know how to get Declude to do that and since I had to get to a parade in NYC to work EMS today at 7am it is so nice to come home to find the answer already exists. Sorry I was so exhausted I didn't go through the manual. You are the best! -Josh On Sunday, June 1, 2003, at 06:29 PM, R. Scott Perry wrote: Yes, there could be. :) Declude JunkMail can do this, by adding an IPBYPASS line in the \IMail\Declude\global.cfg file with the IP address of the backup mailserver. For example, you could add a line "IPBYPASS 192.0.2.25", so that mail coming from 192.0.2.25 would get scanned as if Declude JunkMail was running on that server (scanning the IP of the mailserver that connected to 192.0.2.25). --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Accounting for secondary MX
And I would have seen it too had I not spent the whole night rebuilding my server because my RAID array lost 2 of the 3 drives at the same time. Thanks for the info. -Josh On Sunday, June 1, 2003, at 06:42 PM, Sanford Whiteman wrote: That feature already exists--has for quite a while--and is documented in the manual! In GLOBAL.CFG: IPBYPASS your.backup.mx.ip --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Accounting for secondary MX
> What about HOP. Is that obsolete? HOP is for permanent, full-time skips; IPBYPASS skips specific IPs that may not always connect (such as backup MXs). -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Accounting for secondary MX
What about HOP. Is that obsolete? Sunday, June 1, 2003, 5:29:15 PM, R. Scott Perry <[EMAIL PROTECTED]> wrote: >>Could there be a feature where you could put in the IPs / DNS names of >>secondary MX servers and when mail comes from them it doesn't do RBL >>against that IP, but rather the IP that delivered the mail to the >>secondary. So the spam tests still work. RSP> Yes, there could be. :) RSP> Declude JunkMail can do this, by adding an IPBYPASS line in the RSP> \IMail\Declude\global.cfg file with the IP address of the backup RSP> mailserver. For example, you could add a line "IPBYPASS 192.0.2.25", so RSP> that mail coming from 192.0.2.25 would get scanned as if Declude JunkMail RSP> was running on that server (scanning the IP of the mailserver that RSP> connected to 192.0.2.25). RSP> -Scott RSP> --- RSP> Declude JunkMail: The advanced anti-spam solution for IMail mailservers. RSP> Declude Virus: Catches known viruses and is the leader in mailserver RSP> vulnerability detection. RSP> Find out what you have been missing: Ask for a free 30-day evaluation. RSP> --- RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] RSP> --- RSP> This E-mail came from the Declude.JunkMail mailing list. To RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and RSP> type "unsubscribe Declude.JunkMail". The archives can be found RSP> at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Accounting for secondary MX
> Could there be a feature where you could put in the IPs / DNS names > of secondary MX servers and when mail comes from them it doesn't do > RBL against that IP, but rather the IP that delivered the mail to > the secondary. So the spam tests still work. That feature already exists--has for quite a while--and is documented in the manual! In GLOBAL.CFG: IPBYPASS your.backup.mx.ip >From http://www.declude.com/junkmail/manual.htm: > Skipping your backup mail server > If you have a backup mail server, the normal E-mail routing can be > changed. Rather than remote mail servers delivering mail directly to > the primary mail server, the mail can sometimes go through the > backup. In this case, Declude will by default scan the IP address of > your backup server (since it doesn't know that it is your backup > mail server). > Declude JunkMail [Standard and Pro versions only] can still work in > this situation. To handle this, you can add a line to the > \IMail\Declude\global.cfg file that says "IPBYPASS 192.0.2.25" > (where 192.0.2.25 is your backup mail server). Using the IPBYPASS > configuration option, Declude will skip over that hop, and > automatically start scanning based on the IP of the mail server that > connected to the backup mail server. You can have up to 20 IPBYPASS > lines in the global.cfg file. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Accounting for secondary MX
Could there be a feature where you could put in the IPs / DNS names of secondary MX servers and when mail comes from them it doesn't do RBL against that IP, but rather the IP that delivered the mail to the secondary. So the spam tests still work. Yes, there could be. :) Declude JunkMail can do this, by adding an IPBYPASS line in the \IMail\Declude\global.cfg file with the IP address of the backup mailserver. For example, you could add a line "IPBYPASS 192.0.2.25", so that mail coming from 192.0.2.25 would get scanned as if Declude JunkMail was running on that server (scanning the IP of the mailserver that connected to 192.0.2.25). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Accounting for secondary MX
I have a secondary MX record for all my domains that goes to a windows 2003 server running the SMTP server configured for remote domains. Basically mail queues up and it waits until my primary server comes online and then delivers the mail. The problem with this is that my RBLs don't work because of course dc1.joshie.com is not in any RBL, and the mail is coming from there when the Imail server was down or was so busy it refused a connection and the mail went to the secondary. Could there be a feature where you could put in the IPs / DNS names of secondary MX servers and when mail comes from them it doesn't do RBL against that IP, but rather the IP that delivered the mail to the secondary. So the spam tests still work. -Josh --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
