RE: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Robert Grosshandler
Thanks all! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Thursday, April 26, 2007 6:09 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Ever legit? Do not accept mail with your own helo setup a helo filter HELO 15

RE: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Kevin Bilbee
Do not accept mail with your own helo setup a helo filter HELO 15 IS igive.com Set it at your hold weight. Your actual server(s) IP addresses should already be whitelisted so it will not affect your internal mail routing. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] [

Re: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Scott Fosseen
It looks like you have SPF setup on your DNS. I would think that enabling the "SPFFail" test or adjusting the action/weight would correct your problem. An email comes in, Declude looks up your SPF record from DNS and compares the IP with the list of trusted senders. It should fail the test wi

RE: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Colbeck, Andrew
Robert, you would use a filter file for this, e.g. #First, escape this file if the source is on your own network REMOTEIP END CIDR 208.100.26.0/24 REMOTEIP END CIDR 192.168.0.0/24 #Skip this whole test if we are already above a hold weight of 20 SKIPIFWEIGHT 25 #Apply a maximum total weight o

Re: [Declude.JunkMail] Ever legit?

2007-04-26 Thread Scott Fisher
A little more of the headers would be helpful. It's a zombie of some flavor. 71.250.241.101 = static-71-250-241-101.nwrknj.east.verizon.net. You could use a filter with HELO 10 IS IGIVE.COM - Original Message - From: "Robert Grosshandler" <[EMAIL PROTECTED]> To: Sent: Thursday, April

RE: [Declude.JunkMail] Ever legit?

2007-04-26 Thread David Barker
You could try using a filter like this: #Remote mail hosts connecting and announcing your IP addresses HELO 10 CONTAINS 208.100.26.91 #Remote mail hosts connection and announcing your hostnames HELO 10 ENDSWITH igive.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTE

[Declude.JunkMail] Ever legit?

2007-04-26 Thread Robert Grosshandler
Hi We get e-mails that contain the following header (or something similar): Received: from igive.com [71.250.241.101] by smtp.igive.com with ESMTP (SMTPD-9.20) The 71.xxx.xxx.xxx isn't ours. That IP can vary, but it is never ours. Are there any legit mailers that would send something in this