Re: [Declude.JunkMail] The first time BONDEDSENDER didn't work for me me

[Matthew Bramble]

That's why you should name it BONDEDSENDER-DYNA and why it doesn't 
matter on my system.

The trick here is that Declude will skip over the DNS-based tests on 
anything beyond the first hop if the name has DUL or DYNA in it.  
Someone else is using CBL-DYNA in order to keep that test from throwing 
FP's when the originating computer's IP address is on the list, but used 
a legit mail server to send the E-mail (instead of direct delivery which 
is the real issue).

Scanning multiple hops seems to be mostly useful in places where E-mail 
is being forwarded, which only exposes the legit forwarding machine.  It 
would be great if there was some other way to identify when a message 
has been forwarded at the server level, and skip the last hop when that 
happenes.  I kind of doubt that this would be possible.  In the 
mean-time, I am going to try IPBYPASSing the mail servers that are known 
to be forwarding to my server which should have the same effect as a 
selective use of multiple hop scanning.

Matt



George Kulman wrote:

Matt,

I do scan multiple hops.

George

 

-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
Matthew Bramble
Sent: Friday, December 05, 2003 7:14 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] The first time BONDEDSENDER 
didn't work for me me

George,

The suggestion by Andrew to rename the test BONDEDSENDER-DYNA would 
definitely prevent it from scanning prior hops.  I find this 
test to be 
useful as it is IP based and helps some very important E-mail 
that tends 
to have issues with several major RBL's.  I haven't started 
to scan on 
multiple hops yet, so this doesn't come into play.

Matt



George Kulman wrote:

   

Rob,

Your backup and gateways should have IPBYPASS entries in the 
     

GLOBAL.CFG.
   

The BONDEDSENDER should be the originating Server and that 
     

should be what's
   

used for this test.

I discontinued use within a few days since  was letting spam 
     

through with it
   

and there were other ways to handle the valid mail.

George



     

-----Original Message-----
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
Robert Grosshandler
Sent: Friday, December 05, 2003 6:38 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] The first time BONDEDSENDER 
didn't work for me me

Negative weights on last hop only?

How would that affect a gateway (or e-mail that goes to a 
       

backup mail
   

server)?

Rob

  
       



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.