I just tested from a remote citrix server, authenticating back -- the HELO sent was the remote machines NAME under windows as the HELO. RDNS of the sending IP, of course, would reveal the registered name. It depends on which you are testing, what rule you might want to use. since outgoing mail uses different processing rules (in global.cfg, instead of junkmail), you can hold on fails for incoming and ignore outgoing, if you group them into one rule file, correct Scott?
If you just add weight, of course, then outgoing mail might get held, but you can always set up a rule that subtracts weight leaving from "your" ip ranges or use the next higher weight range before holding any outgoing. > -----Original Message----- > >Outlook Express, and they login to my server to send mail. Doesn't their > >mail client send a HELO/EHLO to my server when they go to send? > > Correct. > > >And wouldn't it be an IP address and/or a in-addr.arpa PTR when > they connect? > > No reverse DNS entry should point to an in-addr.apra address > (although some > are incorrectly set up to do so). Most likely, the reverse DNS > entry would > point to something like "HOST-192-0-2-25.example.com". --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
