Re: [Declude.JunkMail] Another very effective filter test

[Matthew Bramble]

It was set as "Syracuse" as the machine name, however I also tested this on my own machine by sending E-mail to myself and got the same result.  I just now tested Outlook Express from the same computer and it doesn't have that behavior...this is something that Netscape 7 does (and maybe other versions). This shouldn't affect mail sent by Netscape Mail from other SMTP servers because I'm sure those servers will be replacing that domain with their own, so it's only a problem that affects people using Netscape Mail and are have it set up with an alias lying on a different domain than that of their SMTP server settings.  It seems to be very strange behavior for a mail client.  I think I only have 3 accounts in use with this configuration and Netscape, so I can work around that until I decide that IMail 8 is safe. Thanks for the routing tips and info about your filters.  I think I have a couple of those router filters already, but it won't hurt to add a few more.  I didn't realize that the forged IP sent with HELO could be blocked at the router (please correct me if this is not the case). Matt Karen D. Oland wrote: what did he set the computer name to in Windows? Admittedly, I haven't tried netscape, but I always get just the pure computer name in the HELO/EHLO when remote (it has NOTHING to do with the account name for email on any system I've tried, most of which use IE or outlook) K -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matthew Bramble Sent: Tuesday, September 23, 2003 2:36 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Another very effective filter test Here's an example of what I'm talking about: Received: from nycars.com [24.92.238.169] by igaia.com with ESMTP I host both of these domains, though that is the IP of a cable modem account. What's happening here (I have confirmed this) is that the connecting computer has an actual account on igaia.com and is set up for SMTP using that domain. His from address in his E-mail program though says [EMAIL PROTECTED] (he has an alias there) and somehow the server isn't using his computer name, but instead is using the domain in his from address that is also hosted on my server.