Hi There is a very important issue about Webshield when running as a
gateway.
If your webshields receive mails and forward to imail with declude.
Declude will not be able to correctly identfy spam mail.
This is not declude's fault.
WebShields does not forward correct headers to declude.
Here is an example
Received: from webshields.atlas.net.tr [10.10.10.2] by declude.atlas.net.tr
Received: from spamserver by webshields.atlas.net.tr
Webshields only get the name of the remote machine and does not include the
ip address
which prevent declude to make test on the ip and the rest of the header.
The first time i installed declude , i saw that only 40% of the spam was
detected.
Then i removed webshields and use declude virus the performance was really
high, and spam protection level jump from 40% to 95% .
Just for your information.
I am still using webshield as a outgoing server for hosting domains .
Rifat Levis
----- Original Message -----
From: "Erminio Ballerini" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 03, 2003 4:02 PM
Subject: Re: [Declude.JunkMail] Hop, hophigh & ipbypass
On 3 Jun 2003 at 8:14, R. Scott Perry wrote:
> >I think my reasoning is wrong because I see a lot of mail getting flagged
> >as originating from my own Imail server:
> >X-Note: This E-mail was sent from (Private IP) ([192.87.68.b]). (the
Imail
> >server)
> >What am I doing wrong?
>
> That is very unusual. Do you have another mailserver besides IMail
running
> on the IMail server (which listens on port 25 and sends E-mail to IMail on
> a different port)? Even if that was the case, you should normally see an
> IP of 127.0.0.1, not the IP of the IMail server.
>
> Could you post all the Received: headers from an incoming E-mail? That
> should help determine the best settings to use.
McAfee Webshield for SMTP on mailrelay.scp.nl listens at port 25 and sends
the e-mail
to port 2525 to SMTPBeamer. Who relays the e-mail to imail.scp.nl.
NAVGW on imail.scp.nl listens at port 25 and sends the e-mail to port 2525
to IMail,
Ok, here is an example
with
HOP 0
HOPHIGH 0
IPBYPASS 192.87.68.214
Received: from imail.scp.nl [192.87.68.175] by imail.scp.nl
(SMTPD32-7.15) id A9421A40096; Tue, 03 Jun 2003 14:49:06 +0200
Received: from mailrelay.scp.nl ([192.87.68.214])
by imail.scp.nl (NAVGW 2.5.2.12) with SMTP id M2003060314490625617
for <[EMAIL PROTECTED]>; Tue, 03 Jun 2003 14:49:06 +0200
Received: from 192.87.68.214 [192.87.68.214]
by mailrelay.scp.nl
with SMTPBeamer v3.33 ;
Tue, 3 Jun 2003 14:49:06 +0200
Received: FROM smtp2.libero.it BY mailrelay.scp.nl ; Tue Jun 03 14:49:05
2003 +0200
Received: from libero.it (193.70.192.57) by smtp2.libero.it (7.0.012)
id 3E9BEBBA00489371 for [EMAIL PROTECTED]; Tue, 3 Jun 2003
14:49:03 +0200
X-Note: This E-mail was sent from imail.scp.nl ([192.87.68.175]).
Erminio
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
