Whitelisting by IP is the safest since it is the hardest to spoof. Whitelisting by reverse DNS would do no better than by IP because you have off-network users connecting directly to your mail server (seen with that X-Declude-Sender entry), so choose IP over reverse DNS. The best solution though would be to upgrade to IMail 8 and Declude 1.76 in order to make use of Declude's WHITELIST AUTH functionality which will whitelist SMTP AUTH'ed users. There have been enough reports about IMail 8 having issues (only on the 8.03 release) to scare me away from the rush to upgrade.

Matt



Marc Catuogno wrote:

I am running IMAIL 7.15 and Declude 1.75.  I knew I had a big no-no in
my Global file; whitelist from prudentialrand.com.  A spammer has now
been exploiting it.  How can I get my users whitelisted so they can
communicate with each other without worrying about being filtered
without letting the spammers use it?

I wanted to use whitelist REVDNS prudentialrand.com would that work???


It does sometimes seem that e-mails have the IP address of whatever ISP I happen to be connected to and not the IP of my mailserver:

X-Declude-Sender: [EMAIL PROTECTED] [67.83.160.48]

That IP is optonline and not my mailserver IP. Does that seem right?




--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to