Thanx Bud,
I think a script will be necessary since there are about 800 legitimate
addresses. The aliases are in the registry so with some simple scripting
I could import a list into the registry.
Just to make sure I understand, you would not add any users to the iMail
domain you would just add aliases? Right?
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Bud Durland
> Sent: Wednesday, October 20, 2004 3:20 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Prevent Mail to Ex-Employees
>
> Goran Jovanovic wrote:
>
> >I am doing gateway anti-spam scanning for a school which has
GroupWise
> >as the e-mail system. We are seeing many e-mails going to students
that
> >are not there anymore which then creates an NDR at their end which
then
> >floods their system .....
> >
> >Now is it possible to do one of two things:
> >
> >1) Get a current list of people (staff and students) and somehow only
> >allow mail to those recipients. In a filter you would have to use an
> >ALLRECIPS check perhaps with a negative number, although not sure how
> >this will delete the bad mail since I have nothing to add to the
score
> >when the old e-mail address comes up.
> >
> >2) I think what I would really like to do is work on building up a
list
> >of old students getting mail and then if the mail is addressed to
them
> >delete it. So something like ALLRECIPS 100 CONTAINS
> >[EMAIL PROTECTED] in a filter but the problem I see with this is
if
> >the mail is addressed to both an old student and a current
student/staff
> >then it would still trigger and then delete the mail.
> >
> >Anyone have any other thoughts on this or better ways to make this
> >happen?
> >
> >
> >
>
> My guess is that you have forwarding turned on for the IP address of
the
> GroupWise server. Mail for that domain (we'll call it
'theschool.com')
> comes in to your iMail box. A lookup in your iMail server's HOSTS file
> yields the IP address of the GW server, and the message is forwarded.
>
> This would probably be easier (easiest?) using iMail aliases. Set up
a
> virtual domain on your iMail box for 'theschool.com'. Don't add any
> users yet. Add an entry to the iMail systems HOSTS file, substituting
> the GW server's IP address:
>
> 192.168.1.1 gw.theschool.com
>
> Now for legitimate users of the GroupWise system, add an alias to the
> 'theschool.com' domain:
>
> UserName = [EMAIL PROTECTED]
>
> With this setup, legitimate mail is sent to the correct address, and
bad
> addresses are rejected at the iMail server -- no bounce traffic, just
a
> closed connection. This can also be a useful tool if the GW
> administrator want to limit who can be a legitimate 'internal' mail
> users, but not receive mail from the outside world, or if they have
some
> crazy urge to have all badly addressed mail sent to a particular
address
> (the iMail 'nobody' alias)
>
> You might be able adapt one of Sandy's utility scripts to import the
GW
> LDAP directory directly and automatically to the iMail aliases list.
>
> --
> --------------------------------------------------------------------
> He made us believe a man could fly
> Christopher Reeve, 1952-2004
> ---------------------------------------------------------------------
> Bud Durland, CNE Mold-Rite Plastics
> Network Administrator http://www.mrpcap.com
> ---------------------------------------------------------------------
>
> ---
> [This E-mail scanned for viruses by Declude Virus / Sophos AV]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.