<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: Whitelisting problem</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Don't think I'd be able to find what servers they send out all their mail from.</FONT>
</P>
<P><FONT SIZE=2>Possible feature:</FONT>
</P>
<P><FONT SIZE=2>Whitelisting based on reverse name lookups.</FONT>
</P>
<P><FONT SIZE=2>If the email was sent from a server that reverse looks up as domain then whitelist.</FONT>
</P>
<P><FONT SIZE=2>From: *@ibm.com lookup</FONT>
</P>
<P><FONT SIZE=2>lookup as an additional parameter to yes no.</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Julian Field [<A HREF="mailto:mailscanner@ecs.soton.ac.uk">mailto:mailscanner@ecs.soton.ac.uk</A>]</FONT>
<BR><FONT SIZE=2>Sent: Tuesday, January 07, 2003 11:56 AM</FONT>
<BR><FONT SIZE=2>To: MAILSCANNER@jiscmail.ac.uk</FONT>
<BR><FONT SIZE=2>Subject: Re: Whitelisting problem</FONT>
</P>
<BR>
<P><FONT SIZE=2>At 16:50 07/01/2003, you wrote:</FONT>
</P>
<P><FONT SIZE=2>>IBM is a partner of ours so I have whitelisted ibm.com</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>>But now some spammer is forging both the envelope and header to look like</FONT>
<BR><FONT SIZE=2>>it cam from ibm.com</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>>The spammer appears to be creating random addresses ending in @ibm.com</FONT>
<BR><FONT SIZE=2>></FONT>
<BR><FONT SIZE=2>>Is my only choice to remove ibm.com from the whitelist?</FONT>
</P>
<P><FONT SIZE=2>If ibm.com only use a few outgoing mail servers, you could whitelist their</FONT>
<BR><FONT SIZE=2>IP addresses instead.</FONT>
<BR><FONT SIZE=2>--</FONT>
<BR><FONT SIZE=2>Julian Field</FONT>
<BR><FONT SIZE=2>www.MailScanner.info</FONT>
<BR><FONT SIZE=2>MailScanner thanks transtec Computers for their support</FONT>
</P>
</BODY>
</HTML>