Scott,
I'm going to guess that this is an issue with RFC compliance of Postini
in how it includes the received headers, but the following headers
shows a first hop that isn't being looked up consistently when one of
our clients have E-mail being forwarded through a Postini protected
host.
I'm going to guess that this is an issue with RFC compliance of Postini in
how it includes the received headers, but the following headers shows a
first hop that isn't being looked up consistently when one of our clients
have E-mail being forwarded through a Postini protected host.
Received:
I foolishly was creating a test and called it REVDNS - then realized that it
was a duplicate test - I changed the name. Now the REVDNS test doesn't
work.
REVDNS revdnsexistsx x 10 0
That is the line in my global config
And this is line in an e-mail this morning:
R. Scott Perry wrote:
What is the IP that Declude JunkMail is seeing here?
That last Received: header is indeed very poorly designed, where it
would be quite difficult to determine automatically which IP was which.
I'm scanning on up to 4 hops and I assume that Declude can read
everything
Mark,
That line looks just fine. I would spend some time trying to find if
there are any other duplicates lying around in both your Global.cfg and
JunkMail files. Also, in your Global.cfg file, make sure that you have
the following line:
XINHEADERX-Note: This E-mail was sent from
I don't know what it was but I had named the test REVDNS and it looked like
this:
REVDNS filter D:\REVDNS.txtx 0 0
This caused a dupe test and didn't work:
I then changed it to:
DNS filter D:\DNS.txt x 0 0
And the regular REVDNS test
Ok, I realize this is a waay old thread, but I got behind and was
doing some archive research.
You can relax this weekend. :)
The latest interim 1.78i30 at http://www.declude.com/interim adds a
COPYFILE action (in the format TESTNAME COPYFILE C:\IMail\spool\copy\)
that will copy the file to
David,
COPYFILE is not a final action like HOLD is, but it works almost
exactly the same way in how it handles the files. The difference in
how the files are handled come down to the Declude headers. HOLD
actions will have Declude headers in them while COPYFILE actions will
not, instead it
Hello Matt,
Friday, September 17, 2004, 4:38:36 PM, you wrote:
M David,
M COPYFILE is not a final action like HOLD is, but it works almost
M exactly the same way in how it handles the files. The difference in
M how the files are handled come down to the Declude headers. HOLD
M actions will
I've posted a batch file that I run, that parses my
Declude Junkmail or Imail logs for spammer's IP addresses that have sent to some
spamtrap e-mail addresses and creates a file that Declude can use as an IPFILE
test.
If interested, I posted it near the bottom of this
page:
In my further reading that's what I thought was the case but
wanted to confirm. At one time there appeared to be talk of
an enhancement to the HOLD feature to specify the place where
messages were held. Disk I/O takes a huge hit when we process
the /spool/spam folder every hour. It would
I will be installing HiJack on Monday morningplease let me know what I
need to do to get it running...Scott may want to answer this if you are
there...thanxs a bunch...this has been a nigthmare..I have turned of Declude
JunkMail just so my server can catch up..we are monitoring who is
Hello Markus,
Friday, September 17, 2004, 7:01:14 PM, you wrote:
MG A.) MOVE certain messages to configurable folders
MG B.) COPY certain messages to configurable folders
MG 1.) If you're an ISP Admin: Do you know what's happening near below your
MG 2.) Do you maintain a personal filter file
Hey...while I'm on a roll here. Declude docs don't
specifically say what is considered in IPBYPASS. That doesn't
scan the headers for multiple hops does it? I'm hoping it
just considers the IP that connected to the Imail box. That's
how I'm using it.
As I know you can specify a list of
14 matches
Mail list logo
