Hello Davide and list I'm confused ! XMail doc in sections for filters (in and out) and smtp filters (in and out) says that first line in the spool file passed to filters is as this :
ClientDomain;ClientIP;ClientPort;ServerDomain;ServerIP;ServerPort;Time;Logo (Note that no info on first line is given in external commands sections in doc ...) First : What is the exact supposed to be in fields 'ClientDomain', 'ServerDomain' and 'Logo' ? (smtp equivalent or dns equivalent or session ...) Second : After getting a copy of some spool files with a test filter that only copy the spool file and return ok, and after reading the them, first line is really formatted like this : [aaa.bbb.ccc.ddd]:eee;[fff.ggg.hhh.iii]:jjj;Mon, 23 May 2005 12:05:39 +0200 As you can see no 'ClientDomain' field, no 'ServerDomain' field, and no 'Logo' field ! No info in changelog !!! ( [ and ] surrounding ip's is not the problem as this change is noted in changelog ... but doc not corrected to reflect this :-) ) Lastly (at this time ;-) : Nor the first line in the spool file, nor filters/external commands @@ parameters can return the 'HELO' or 'EHLO' date send by the remote client at start of smtp session ? Or does this info 'normally' comes in one of the missing fields 'ClientDomain' or 'Logo' ? If none of these fields should return this value and as no @@ macro currently exist, it could be usefull to have Helo/Ehlo data (in first line in spool file and in a @@macro). I am currently writing a filter to test agains helo/ehlo forgery because I received many spams that are send from real 'spammers' smtp servers/tools that retry and tools like glst accept the mail on later retry but announced helo/ehlo is one of your own domain names or one of your own ip's or 127.0.0.1, so my filter will compare helo/ehlo data with own domains/alias domains and own ips and in case of match compare the real sender ip to accept or reject session (some regular expressions do the job very well). A sort of 'local' spf complementing the 'standard' spf. Actually I have to do this in a post-data filter to read xmail generated 'Received from: ' to get helo/ehlo data, and it works fine, but if I have helo/ehlo data available in pre-data filter stage I will be able to close connexion before receiving data ... Thanks Francis - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
