On 5/2/2011 1:21 PM, R F wrote:
I thought I had this one fixed a while back but apparently
not. I want to reject emails like this that are sent from one
person but claim to be another. Ideas? Notice the first line
and the last line:
From rs...@bnpi.com <mailto:rs...@bnpi.com> Sun May 1
16:37:58 2011
Return-Path: <rs...@bnpi.com <mailto:rs...@bnpi.com>>
[please post in plain text only next time]
The above is the envelope sender. You can configure postfix
to reject your own domain in the envelope sender from outside
mail. See numerous posts on this in the archives.
This will reject legit mail, but probably not a great amount.
Pick your pain threshold.
From: <sh...@some.net <mailto:sh...@some.net>>,
<listser...@some.net <mailto:listser...@some.net>>,
<e...@some.net <mailto:e...@some.net>>,
<gammal...@some.net <mailto:gammal...@some.net>>
Thanks for any ideas.
This is the From: header, which is what is typically displayed
when you read the mail.
(and multiple addresses in the From: header is allowed,
although unusual. but there should be a Sender: header if
there are multiple From:)
Fortunately, postfix has no feature to compare headers with
envelope information. Such comparison will likely reject a
great deal of legit mail (such as this message).
You could probably convince SpamAssassin or some milter to do
such comparison if you're determined, but that doesn't make it
a good idea.
Your efforts would be better spent on finding more reliable
ways to detect spam. Browse the archives for ideas.
-- Noel Jones
