Hi "Declude" staff:

>> While adding DUL, DYNA or DUHL to the test name would skip scanning all
but the last hop, Declude also will not apply any tests named this way to
any E-mail that has a local domain in the Mail From.  The effect of this was
that forging spammers that used local domains would not get tagged with DUL
hits. <<

At one time, this may have been an undocumented "poor man's" way to
"whitelist" your own dial-up/dynamic customers... But, since then Ipswitch
added "SMTP AUTH" (the "A" flag) to the envelope - making that a much more
suitable and only reliable method of "whitelisting" IP-roaming customers.

I feel that the "skip local domains for DUHL tests" "bug/feature" should
DEFINITELY be made a configuration option.  There is no good reason that
most of us are losing the ability to easily make use of very effective
DUL/DYNA/DUHL lists - just because Declude allows spammers DO forge sender
addresses!  

Matt's workaround is certainly clever (cudos!) - but unnecessarily complex
and error-prone (to the average Declude user).

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.HM-Software.com/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to