HI, I use Sophos PureMessage for anti-SPAM/anti-Virus and I¹m having an issue that I think may be related to when an alias with multiple addresses gets exploded (i.e., before or after the message is run through the content filter. PureMessage marks all SPAM but it does not quarantine messages coming from inside our address space, in this case 10.0/8. In some cases, aliases are actually feeds to a program that calculates the recipient list and then feeds it back into the server and in other cases they are simply LDAP based exploders. My concern is to make sure that when a message first hits the server it¹s piped directly to the content filter and only after the filter feeds it back into the server are aliases evaluated. Is that always the default case or do I need to something, possibly in master.cf to insure it?
Thanks, Rob -- Rob Tanner UNIX Services Manager Linfield College, McMinnville Oregon 503-883-2558