And another question- We're seeing a lot of emails with a from line like: From: Known User Name <realaddr...@ourvendor.com> <f...@actuallythesender.com>
realaddr...@ourvendor.com is whitelisted With option 4, we can now score this but will the mail still go through because realadde...@ourvendor.com is whitelisted? Is there a way to remove the whitelist flag if the only reason it's whitelisted is due to a match in a line that was caught by DoNoFromSelect? On Tue, Dec 4, 2018 at 2:30 PM K Post <nntp.p...@gmail.com> wrote: > > This is great. Thank you so much. > For options 32, if there is NO sender line at all, I assume this won't > match (there's no email address because there's no line at all)? > > Options 4 and 8 are going to be great at scoring all of these spoofed > emails we've been seeing this week (fake invoices)!! > > > > On Mon, Dec 3, 2018 at 3:51 PM Thomas Eckardt <thomas.ecka...@thockar.com> > wrote: > >> Hi all, >> >> fixed in assp 2.6.2 *Fortress* build 18337: >> >> - DoNoFrom detected email addresses in the text part of the header text - >> like: "do not detect this address u...@domain.com but the next one" < >> other.u...@other-domain.org> >> >> - under rare conditions the file name in a blocked mail resend request >> was wrong parsed, the file was'nt found and the resend failed >> >> >> added: >> >> - 'DoNoFromSelect','Select Checks for From: and Sender: Header' >> Select which check should be done in DoNoFrom . >> >> 1 - from: and sender: header tag are both missing >> 2 - different domains found in from: and sender: email addresses >> 4 - multiple from: addresses or from: header tags found >> 8 - multiple sender: addresses or sender: header tags found >> 16 - no or an invalid email address found in from: header tag >> 32 - no or an invalid email address found in sender: header tag >> >> Simply form the sum of the numbers in front of the checks you want to >> select (0...63). Default vaule is 63 (1+2+4+8+16+32) - all checks are >> selected.' >> >> >> changed: >> >> >> - $DoNoFromDomainCHK is removed - use DoNoFromSelect instead >> >> >> >> Thomas >> >> DISCLAIMER: >> ******************************************************* >> This email and any files transmitted with it may be confidential, legally >> privileged and protected in law and are intended solely for the use of the >> individual to whom it is addressed. >> This email was multiple times scanned for viruses. There should be no >> known virus in this email! >> ******************************************************* >> >> _______________________________________________ >> Assp-test mailing list >> Assp-test@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/assp-test >> >
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
