1.  You will need to whitelist the entire name, mail.domanname.com.

2.  Make sure that since it did fail those two tests that you do indeed have
it set to "delete" after failing the two tests.  Realize that your whitelist
will have no bearing on these tests.  If all of this is the case, submit a
ticket to Ipswitch.

Travis


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle
Sent: Thursday, July 22, 2004 10:36 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Whitelist entry

Not according to my settings or the log entry provided.  My connection
settings are to delete a message if it fails TWO connection tests.
Obviously since they made it to the content filter they did not fail two
connection tests.  If the message fails only one connection tests it
continues processing and gets a [SPAM-C] inserted and does NOT get
quarantined.

However, looking at the last line of the log entry shows the message
getting caught and why.

07:22 06:57 SMTP(c450161901227ccf) matched phrase [some banned phrase]

That IS a content filter.

At 10:11 AM 7/22/2004, you wrote:
>Wrong - it failed the validation from address.  That is not content
>filtering.
>
>See this line:
> >(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx
>
>That is NOT a content filter.
>
>Travis
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle
>Sent: Thursday, July 22, 2004 10:02 AM
>To: [EMAIL PROTECTED]
>Subject: RE: [IMail Forum] Whitelist entry
>
>Yes, on the Trusted Addresses Tab of Anti-Spam I have the "Apply to content
>filtering only" checked.
>
>"Apply to Content Filtering Only. If this option is selected, messages from
>the domains/e-mail addresses on this tab will only bypass content
>filtering. If this option is cleared, messages from the domains/e-mail
>addresses on this tab will bypass both content and  connection filtering."
>
>Which is what I want so that a message still has to go through connection
>filtering (DNS Blacklist and Verify MAIL FROM address).  Hoping that will
>help act as a simple barrier to someone "spoofing" an email with a fake
>return address.
>
>The message was caught for a content filter violation which the settings
>should have caused it to be excepted from. Hence my question.
>
>At 09:22 AM 7/22/2004, you wrote:
> >Do you have the checkmark in "Apply to Content Filtering Only" for the
> >whitelist?
> >
> >Travis
> >
> >-----Original Message-----
> >From: [EMAIL PROTECTED]
> >[mailto:[EMAIL PROTECTED] Behalf Of Dave Riddle
> >Sent: Thursday, July 22, 2004 9:12 AM
> >To: [EMAIL PROTECTED]
> >Subject: [IMail Forum] Whitelist entry
> >
> >I have a particular domain entered in our whitelist but it does not seem
to
> >be working.
> >
> >The whitelist contains.
> >
> >alloweddomain.com
> >
> >but here is an excerpt log entry where it an email from that domain was
> >caught.
> >
> >07:22 06:56 SMTPD(c450161901227ccf) [00003316] <ourdomain.net>
VALIDATION:
> >(MAIL FROM) ourdomain.net validating MAIL FROM address
> >[EMAIL PROTECTED]
> >07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net>
VALIDATION:
> >(MAIL FROM) ourdomain.net FAILED to connect to xxx.xxx.xxx.xxx
> >07:22 06:57 SMTPD(c450161901227ccf) [00003316] <ourdomain.net>
VALIDATION:
> >(MAIL FROM) ourdomain.net SUCCEEDED for user
> >[EMAIL PROTECTED]
> >07:22 06:57 SMTP(c450161901227ccf) Got Content Filter for ourdomain.net
> >07:22 06:57 SMTP(c450161901227ccf) scanning the subject for phrases
> >07:22 06:57 SMTP(c450161901227ccf) scanning the body for phrases
> >07:22 06:57 SMTP(c450161901227ccf) matched phrase [some banned phrase]
> >
> >do I need to have the whitelist entry be
> >
> >mail.alloweddomain.com
> >
> >
> >
> >
> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> >List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> >
> >
> >
> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> >List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
>
>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to