Re: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Scott Fisher



One difference I know of, is that if you use a 
HOPHIGH parameter, IPFILE will search more hops.
Tehrefore with a HOPHIGH and IPFILE anemail 
with forged headers could trip the test.
REMOTEIP only uses the last hop.

  - Original Message - 
  From: 
  Goran Jovanovic 
  To: Declude.JunkMail@declude.com 
  
  Sent: Monday, January 30, 2006 9:35 
  AM
  Subject: [Declude.JunkMail] IPFILE vs 
  REMOTEIP
  
  
  Hi,
  
  Is there any performance benefit of using an IPFILE 
  lookup vs a REMOTEIP lookup?
  
  Is there any consensus of which option would be better 
  to use to subtract some weight from a good mail?
  
  I am looking into this as I have some mail coming from 
  a server with no REVDNS and a HELOBOGUS and I need to counterweight it 
  somehow. This IP belongs to CrystalTech Web Hosting Inc so I may have to 
  credit back checking the MAILFROM.
  
  X-RBL-Warning: HELOBOGUS: Domain DEDE58 returns a 
  server failure for MX or A records.
  X-RBL-Warning: REVDNS: This E-mail was sent from a 
  MUA/MTA 209.200.82.59 with no reverse DNS entry.
  
  Thanks
  
  Goran Jovanovic
  Omega Network 
Solutions


RE: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Goran Jovanovic








That sounds like IPFILE will use more resources since it is
going to test up to HOPHIGH whereas REMOTEIP will have to be invoked in a
filter file but it is a single test.





Goran Jovanovic

Omega Network Solutions















From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Scott Fisher
Sent: Monday, January 30, 2006
10:57 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
IPFILE vs REMOTEIP







One
difference I know of, is that if you use a HOPHIGH parameter, IPFILE will
search more hops.





Tehrefore
with a HOPHIGH and IPFILE anemail with forged headers could trip the
test.





REMOTEIP
only uses the last hop.







-
Original Message - 





From: Goran Jovanovic 





To: Declude.JunkMail@declude.com 





Sent: Monday, January 30, 2006 9:35 AM





Subject: [Declude.JunkMail] IPFILE vs REMOTEIP









Hi,



Is there any performance benefit of using an IPFILE lookup vs a
REMOTEIP lookup?



Is there any consensus of which option would be better to use to
subtract some weight from a good mail?



I am looking into this as I have some mail coming from a server with no
REVDNS and a HELOBOGUS and I need to counterweight it somehow. This IP belongs
to CrystalTech Web Hosting Inc so I may have to credit back checking the
MAILFROM.



X-RBL-Warning: HELOBOGUS: Domain DEDE58 returns a server failure for MX
or A records.

X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA
209.200.82.59 with no reverse DNS entry.



Thanks



Goran Jovanovic

Omega Network Solutions












Re: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Matt




As Scott pointed out, IPFILE will work on the same number of hops that
Declude is configured for, so it is possible that you could be scanning
multiple hops. IPFILE also does not support SKIPIFWEIGHT or other
tweaks to end processing of a filter. In other words, it always runs.
A custom filter with REMOTEIP can be skipped and REMOTEIP is definitely
limited to the last hop's IP address. It also supports CIDR ranges
like IPFILE does. In the end however, you should find that this
particular type of check, regardless of the mechanism, is very fast and
it would take a lot to overburden your system.

Matt



Goran Jovanovic wrote:

  
  
  
  
  Hi,
  
  Is there any performance benefit of using an
IPFILE lookup vs a
REMOTEIP lookup?
  
  Is there any consensus of which option would
be better to use to
subtract some weight from a good mail?
  
  I am looking into this as I have some mail
coming from a server with no
REVDNS and a HELOBOGUS and I need to counterweight it somehow. This IP
belongs
to CrystalTech Web Hosting Inc so I may have to credit back checking
the
MAILFROM.
  
  X-RBL-Warning: HELOBOGUS: Domain DEDE58
returns a server failure for MX
or A records.
  X-RBL-Warning: REVDNS: This E-mail was sent
from a MUA/MTA
209.200.82.59 with no reverse DNS entry.
  
  Thanks
  
  Goran Jovanovic
  Omega Network Solutions