That's the problem.
We want to make sure that all legitimate emailers are notified if the
message doesn't go through.
We'd rather ALERT than for a sales/support lead to just go un-answered..

So, in this case, I guess I could put a rule in the fromfilter that
says:

MAILFROM        20      ENDSWITH        @ourdomain.name

Which would block all inbound messages with our domain as the sender's
email address.

How often do legitimate email (list servers, online stores, etc) use the
same address?

Which brings me to another question....

Is there a way to only ALERT for a specific weight range?
Given the above scenario, we wouldn't want to ALERT for emails that have
a weight of 20+ (messages that are obviously spam) but we would for
messages for weight (12-15).

Mark


> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED]] On Behalf Of R. 
> Scott Perry
> Sent: Tuesday, December 10, 2002 10:58 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Bounceback coming to recipient
> 
> 
> 
> >I have a few tests setup to do ALERT. When that test fails, Junkmail 
> >sends the alert to the original sender. However, when 
> spammers put the 
> >recipient as the sender, my users get the ALERT action.
> >The end result is that they actually get the spam message.
> 
> That's exactly how it should work -- and exactly why you have 
> to be careful 
> using the BOUNCE and ALERT actions.
> 
> If your users don't like getting those, the other innocent 
> victims of real 
> spam won't like them either.  If a spammer uses a fake return 
> address -- 
> whether it is that of a user of yours, or someone you don't 
> know -- damage 
> will be done by using the BOUNCE or ALERT action.  It's just 
> a matter of 
> whether the user is yours or someone you don't know.
> 
> In this case, I would recommend not using the BOUNCE or ALERT 
> actions.  Those actions are typically only appropriate when 
> most of the 
> mail they would catch would be legitimate mail from 
> mailservers that have 
> problems.
>                                  -Scott
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the 
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> [This E-mail scanned for 
> viruses by F-Proto Virus Scanner]
> 
> 

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to