We are seeing a case where the mail server will connect to itself. Check
out the DNS for this spammer's domain: hotoptions.net
It has no MX record, but an A record pointing to: 127.0.0.1
If an email from this domain is bounced due to a full mailbox, this will
cause Imail to attempt to
Question..
I see more and more spams that is coming where the senders MTA is
claiming to be the localhost
As for example one of my servers is called imail.fament.com
Latest spam that slipped through had following header
Received: from imail.fament.com [66.81.201.98] by imail.fament.com
SOO.. My question is this.. Could I create a wordfilter rule that
goes like
HELO 10 CONTAINS imail.fament.com
or will that shoot myself in the foot for some reason ?
That will work fine, just so long as you don't have any other mailservers
that identify themselves as imail.fament.com. If your
Alright. Great. No the other mailserver identifies itself as
backup.fament.com which I don't have declude on.
On the other hand there. My backup mx server only forward mail. Do I
have to get the Pro version of Declude or would Standard be enough ?
I did throw out Webshield because it records the
Alright. Great. No the other mailserver identifies itself as
backup.fament.com which I don't have declude on.
On the other hand there. My backup mx server only forward mail. Do I
have to get the Pro version of Declude or would Standard be enough ?
The Standard version will work fine in this case.
-Original Message-
From: R. Scott Perry
Sent: Wed, 12 Mar 2003 18:17:33 -0500
Subject: Re: [Declude.JunkMail] HELO contains
SOO.. My question is this.. Could I create a wordfilter rule that
goes like
HELO 10 CONTAINS imail.fament.com
or will that shoot myself in the foot for some reason
