The IP is a backup server provided by our ISP. As i've been blocking more IP's it seems more messages are coming through this way which prevents me from blocking them.
This is a tricky one (most anti-spam tools don't scan E-mail from backup mailservers or gateways). Without Declude, you could try using IMail's filters to block E-mail with "[192.0.2.25]" in the headers (replacing 192.0.2.25 with the IP of the spamming mailserver, of course).
On a similiar note, I'm running into situations like the above where the IP is a larger providers IP (like Excite, MSN, Yahoo.....) the Mail from is something entirely different. (forged like above).
That's very, very common. Declude JunkMail has a SPAMDOMAINS test that lets you catch E-mail like this; IMGate has something similar. However, with just filters, it will probably be impossible to catch such E-mail.
When I click on the Options tab of the message itself, there is no header information, so I
can't see where it is really coming from.
Ummm....
It sounds like you aren't using a good mail client. Every E-mail has headers that include the IP address that connected to IMail (and if IMail received it from your backup mailserver, it should have the IP address that connected to your backup as well).
I realize this is tactic used by spammers, but how do you folks combat this?
With third party software. :) I don't think there is any other way.
I can't block the IP, it's legit.
You mean you want to receive E-mail from an organization that is spamming you? That's odd.
If you mean that the IP is legit as in "Legitimate people *might* use that IP" (as is the case with open relays), don't worry about it. Blocking open relays wholesale isn't a good idea in my opinion, but if one has already sent you spam, it's worth blocking (the chances of getting legitimate E-mail from a mailserver that you got spam from is very slim).
Budget issues prevent a Declude purchase at this time.
Have you tried counting how many hours you have spent with filters, Control Access files, etc.? If you can't afford Declude JunkMail, you may want to consider IMGate.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
