On 12/27/2018 5:56 AM, Thomas Eckardt wrote:
- 'DoNoFromRemovesNPWL' is now moved to the GUI
'DoNoFromRemovesNPWL','DoNoFrom Removes NP, WL
Flag','0:disabled|1:whitelisted|2:noprocessing|3:both'
'If the combination of DoNoFrom , DoNoFromSelect , DoNoFromWL and
DoNoFromNP gives more than one hit, the whitelisted and/or the
noprocessing flag will be removed from the message.
For example: if the FROM: and /or SENDER: address fakes a whitelisted
and/or noprocessing address or domain.
Default setting is both.
The noprocessing by size flag ( npSize ) will be keeped.'
This appears to give me some false positives for some mailing list
messages. The "From:" shows a personal address while the "Sender:"
shows the mailing list. In my case - both of these addresses are
already in WL and/or NP. And these are valid, not faked - possibly the
result of the mail list administrator being able to send out using his
own domain.
If I simply set DoNoFromRemovesNPWL to "disabled" - what would be the
result? Would I still be protected against spoofed NPWL addresses?
Ideally, when From & Sender don't match, but *both* are in NPWL, ignore
the condition.
Daniel
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
