----- Original Message -----
From: "Karen D. Oland" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 11, 2003 9:12 AM
Subject: RE: [Declude.JunkMail] Lost One Account - Help Please
> Make sure you DO NOT whitelist your own domain, ip address, the postmaster
I agree with everything you have stated except, whitelisting you own IP
address is fine, since that is not tied to how the HELO is presented by the
connecting mail server. The IP address of the connecting mail server is not
something that would be trivial to forge (which again has nothing to do with
the HELO string), and if you have setup you boarder router or firewall to
block spoofing attempts, then it becomes virtually impossible that any other
system could connect using your own IP address (in fact, even if they did
connect to you with you own IP address, your system would think it was
talking to itself and would most likely not send anything back to the
connecting mail server).
> HELO 10 ENDSWITH 0
> HELO 10 ENDSWITH 1
> HELO 10 ENDSWITH 2
> HELO 10 ENDSWITH 3
> HELO 10 ENDSWITH 4
> HELO 10 ENDSWITH 5
> HELO 10 ENDSWITH 6
> HELO 10 ENDSWITH 7
> HELO 10 ENDSWITH 8
> HELO 10 ENDSWITH 9
In addition to the above, since I do not believe that any of these
characters is legal in an e-mail address, hostname, or RDNS, why not also
add the following to your filter files:
HELO -10 CONTAINS `
HELO -10 CONTAINS ~
HELO -10 CONTAINS !
HELO -10 CONTAINS #
HELO -10 CONTAINS $
HELO -10 CONTAINS %
HELO -10 CONTAINS ^
HELO -10 CONTAINS &
HELO -10 CONTAINS *
HELO -10 CONTAINS (
HELO -10 CONTAINS )
HELO -10 CONTAINS =
HELO -10 CONTAINS +
HELO -10 CONTAINS [
HELO -10 CONTAINS ]
HELO -10 CONTAINS {
HELO -10 CONTAINS }
HELO -10 CONTAINS \
HELO -10 CONTAINS |
HELO -10 CONTAINS ;
HELO -10 CONTAINS :
HELO -10 CONTAINS '
HELO -10 CONTAINS "
HELO -10 CONTAINS ,
HELO -10 CONTAINS <
HELO -10 CONTAINS >
HELO -10 CONTAINS /
HELO -10 CONTAINS ?
-----
MAILFROM 10 ENDSWITH 0
MAILFROM 10 ENDSWITH 1
MAILFROM 10 ENDSWITH 2
MAILFROM 10 ENDSWITH 3
MAILFROM 10 ENDSWITH 4
MAILFROM 10 ENDSWITH 5
MAILFROM 10 ENDSWITH 6
MAILFROM 10 ENDSWITH 7
MAILFROM 10 ENDSWITH 8
MAILFROM 10 ENDSWITH 9
MAILFROM -10 CONTAINS `
MAILFROM -10 CONTAINS ~
MAILFROM -10 CONTAINS !
MAILFROM -10 CONTAINS #
MAILFROM -10 CONTAINS $
MAILFROM -10 CONTAINS %
MAILFROM -10 CONTAINS ^
MAILFROM -10 CONTAINS &
MAILFROM -10 CONTAINS *
MAILFROM -10 CONTAINS (
MAILFROM -10 CONTAINS )
MAILFROM -10 CONTAINS =
MAILFROM -10 CONTAINS +
MAILFROM -10 CONTAINS [
MAILFROM -10 CONTAINS ]
MAILFROM -10 CONTAINS {
MAILFROM -10 CONTAINS }
MAILFROM -10 CONTAINS \
MAILFROM -10 CONTAINS |
MAILFROM -10 CONTAINS ;
MAILFROM -10 CONTAINS :
MAILFROM -10 CONTAINS '
MAILFROM -10 CONTAINS "
MAILFROM -10 CONTAINS ,
MAILFROM -10 CONTAINS <
MAILFROM -10 CONTAINS >
MAILFROM -10 CONTAINS /
MAILFROM -10 CONTAINS ?
-----
REVDNS 10 ENDSWITH 0
REVDNS 10 ENDSWITH 1
REVDNS 10 ENDSWITH 2
REVDNS 10 ENDSWITH 3
REVDNS 10 ENDSWITH 4
REVDNS 10 ENDSWITH 5
REVDNS 10 ENDSWITH 6
REVDNS 10 ENDSWITH 7
REVDNS 10 ENDSWITH 8
REVDNS 10 ENDSWITH 9
REVDNS -10 CONTAINS `
REVDNS -10 CONTAINS ~
REVDNS -10 CONTAINS !
REVDNS -10 CONTAINS #
REVDNS -10 CONTAINS $
REVDNS -10 CONTAINS %
REVDNS -10 CONTAINS ^
REVDNS -10 CONTAINS &
REVDNS -10 CONTAINS *
REVDNS -10 CONTAINS (
REVDNS -10 CONTAINS )
REVDNS -10 CONTAINS =
REVDNS -10 CONTAINS +
REVDNS -10 CONTAINS [
REVDNS -10 CONTAINS ]
REVDNS -10 CONTAINS {
REVDNS -10 CONTAINS }
REVDNS -10 CONTAINS \
REVDNS -10 CONTAINS |
REVDNS -10 CONTAINS ;
REVDNS -10 CONTAINS :
REVDNS -10 CONTAINS '
REVDNS -10 CONTAINS "
REVDNS -10 CONTAINS ,
REVDNS -10 CONTAINS <
REVDNS -10 CONTAINS >
REVDNS -10 CONTAINS /
REVDNS -10 CONTAINS ?
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
