Below is a header of some junk mail.  I cannot figure out which address
to block and how to block (kill.lst or smtpd32.acc).
The Kill List needs the "return address" (which can be found in the "MAIL FROM" line in the IMail SMTP log file; if you are using Declude JunkMail, it is in the "X-Declude-Sender:" header).

The Control Access file (.acc) is for the IP address that connected to the IMail server.

Received: from email.com [208.255.197.124] by mail.moragg.com
  (SMTPD32-7.13) id A506530CE2; Tue, 05 Nov 2002 11:53:10 +0200
This is the first header, and the only one that can be trusted (unless you know that the remote mailserver is trustworthy).

Therefore, you can add 208.255.197.124 to your Control Access file.

It's also worth noting that this IP is listed in the SPAMCOP, MONKEYPROXIES, and BLITZEDHTTP spam databases, and is missing a reverse DNS entry.

To find out what to put in the Kill List, you would need to look at the IMail SMTP log file.

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Reply via email to