On Thu, 6 May 2010, J.D. Bronson wrote:

I am seeing random spam come in with this consistent type of 'from':

([email protected])
([email protected])
([email protected])

..they all begin with 'ret@' and I need some help creating a
header_check (and/or body check) to catch this.

I dealt with that a long time ago. You'll find (assuming this is the same spammer I see) that the r...@... is also the envelope sender. So just put it in sender_checks. What I have there is:
ret@            554 Server policy rejection

(question for our experts: is 554 an acceptable reject code there?)

-- Larry Stone
   [email protected]

Reply via email to