However, looking at the last line of the log entry shows the message getting caught and why.
07:22 06:57 SMTP(c450161901227ccf) matched phrase [some banned phrase]
That IS a content filter.
At 10:11 AM 7/22/2004, you wrote:
Wrong - it failed the validation from address. That is not content filtering.
See this line: >(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx
That is NOT a content filter.
Travis
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle Sent: Thursday, July 22, 2004 10:02 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Whitelist entry
Yes, on the Trusted Addresses Tab of Anti-Spam I have the "Apply to content filtering only" checked.
"Apply to Content Filtering Only. If this option is selected, messages from the domains/e-mail addresses on this tab will only bypass content filtering. If this option is cleared, messages from the domains/e-mail addresses on this tab will bypass both content and connection filtering."
Which is what I want so that a message still has to go through connection filtering (DNS Blacklist and Verify MAIL FROM address). Hoping that will help act as a simple barrier to someone "spoofing" an email with a fake return address.
The message was caught for a content filter violation which the settings should have caused it to be excepted from. Hence my question.
At 09:22 AM 7/22/2004, you wrote: >Do you have the checkmark in "Apply to Content Filtering Only" for the >whitelist? > >Travis > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle >Sent: Thursday, July 22, 2004 9:12 AM >To: [EMAIL PROTECTED] >Subject: [IMail Forum] Whitelist entry > >I have a particular domain entered in our whitelist but it does not seem to >be working. > >The whitelist contains. > >alloweddomain.com > >but here is an excerpt log entry where it an email from that domain was >caught. > >07:22 06:56 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION: >(MAIL FROM) ourdomain.net validating MAIL FROM address >[EMAIL PROTECTED] >07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION: >(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx >07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net> VALIDATION: >(MAIL FROM) ourdomain.net SUCCEEDED for user >[EMAIL PROTECTED] >07:22 06:57 SMTP(c450161901227ccf) Got Content Filter for ourdomain.net >07:22 06:57 SMTP(c450161901227ccf) scanning the subject for phrases >07:22 06:57 SMTP(c450161901227ccf) scanning the body for phrases >07:22 06:57 SMTP(c450161901227ccf) matched phrase [some banned phrase] > >do I need to have the whitelist entry be > >mail.alloweddomain.com > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
