Thanks Scott, my wisdom grows by the second, along with more grey hairs. A couple more questions: I expected Declude to filter incoming spam, but not outgoing email.
By default, that's how it works. But it's impossible to predict whether a relay attempt via a local host is going to be treated as incoming mail or outgoing mail. Because of the severity of the problem (spammers can send unlimited mail through your server, if it is set up in this way), we block such relay attempts by default.
We have a small client list and I'm not worried about any of them spamming.
In that case, you can remove the "PERCENT HOLD" line from your global.cfg file.
I do understand about relaying, but I thought we had that covered with the IMail no-relay option.
And that's exactly why our default is to block such mail. :)
Although you *should* be protected, if this is a backup mailserver and the primary trusts the backup, the mail will be delivered to its destination (elsewhere on the Internet).
Also, I don't see the percent sign in the to-addresses. Here's how it shows up in the IMail log:
That's odd -- it should only be triggered if there is a percent sign, a colon, or a quote. I'm guessing that bogus Mike Krueger address contained a quote that didn't make it through to this list.
The address to Mike krueger doesn't look like it will work, but I still don't see the percent. I found the message being held and pulled the header, but that doesn't help much either.
That's because Declude JunkMail doesn't look at the headers to determine if the E-mail is being relayed -- since the headers can show that it is not, when in fact it is. It's the Q*.SMD file that has the bogus address in it. If you remove it from there, the E-mail could then be delivered.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
