Hi There is a very important issue about Webshield when running as a gateway.
If your webshields receive mails and forward to imail with declude. Declude will not be able to correctly identfy spam mail. This is not declude's fault. WebShields does not forward correct headers to declude. Here is an example Received: from webshields.atlas.net.tr [10.10.10.2] by declude.atlas.net.tr Received: from spamserver by webshields.atlas.net.tr Webshields only get the name of the remote machine and does not include the ip address which prevent declude to make test on the ip and the rest of the header. The first time i installed declude , i saw that only 40% of the spam was detected. Then i removed webshields and use declude virus the performance was really high, and spam protection level jump from 40% to 95% . Just for your information. I am still using webshield as a outgoing server for hosting domains . Rifat Levis ----- Original Message ----- From: "Erminio Ballerini" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 03, 2003 4:02 PM Subject: Re: [Declude.JunkMail] Hop, hophigh & ipbypass On 3 Jun 2003 at 8:14, R. Scott Perry wrote: > >I think my reasoning is wrong because I see a lot of mail getting flagged > >as originating from my own Imail server: > >X-Note: This E-mail was sent from (Private IP) ([192.87.68.b]). (the Imail > >server) > >What am I doing wrong? > > That is very unusual. Do you have another mailserver besides IMail running > on the IMail server (which listens on port 25 and sends E-mail to IMail on > a different port)? Even if that was the case, you should normally see an > IP of 127.0.0.1, not the IP of the IMail server. > > Could you post all the Received: headers from an incoming E-mail? That > should help determine the best settings to use. McAfee Webshield for SMTP on mailrelay.scp.nl listens at port 25 and sends the e-mail to port 2525 to SMTPBeamer. Who relays the e-mail to imail.scp.nl. NAVGW on imail.scp.nl listens at port 25 and sends the e-mail to port 2525 to IMail, Ok, here is an example with HOP 0 HOPHIGH 0 IPBYPASS 192.87.68.214 Received: from imail.scp.nl [192.87.68.175] by imail.scp.nl (SMTPD32-7.15) id A9421A40096; Tue, 03 Jun 2003 14:49:06 +0200 Received: from mailrelay.scp.nl ([192.87.68.214]) by imail.scp.nl (NAVGW 2.5.2.12) with SMTP id M2003060314490625617 for <[EMAIL PROTECTED]>; Tue, 03 Jun 2003 14:49:06 +0200 Received: from 192.87.68.214 [192.87.68.214] by mailrelay.scp.nl with SMTPBeamer v3.33 ; Tue, 3 Jun 2003 14:49:06 +0200 Received: FROM smtp2.libero.it BY mailrelay.scp.nl ; Tue Jun 03 14:49:05 2003 +0200 Received: from libero.it (193.70.192.57) by smtp2.libero.it (7.0.012) id 3E9BEBBA00489371 for [EMAIL PROTECTED]; Tue, 3 Jun 2003 14:49:03 +0200 X-Note: This E-mail was sent from imail.scp.nl ([192.87.68.175]). Erminio --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.