Anyway, most spam has IPs that don't resolve or comes through several different hops.
That's OK -- in fact, the lack of a reverse DNS entry is one of the signs of spam that can be used in Declude JunkMail (although we don't recommend blocking E-mail just because of a reverse DNS entry, but it can work well towards the weighting system).
As far as the multiple hops go, Declude JunkMail is one of the few anti-spam programs that will be able to deal with that properly. So even if you have a gateway server in front of your IMail server, Declude JunkMail will still be able to run on the IMail server and scan the E-mail as though it were really running on the gateway server (seeing the IP address that connected to the gateway).
How does declude block spam based upon the source?
There are actually over 100 public spam tests (see http://www.declude.com/junkmail/support/ip4r.htm for the list of known public spam databases) that can be used. Typically, you'll use the default configuration in Declude JunkMail, which includes about a dozen of those, and E-mail failing too many of those tests will get caught.
What about the guy who has a dial-up connection and sends spam from his pc then disconnects and dials-up from somewhere else?
Several of the tests specifically list dialup lines. :)
If you want, you can E-mail me the Official Host Name of your mailserver (off-list), and I can send you a 30-day evaluation version of Declude JunkMail, so you can decide for yourself whether or not it would be worthwhile.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
