On 03/30/2014 01:25 PM, li...@rhsoft.net wrote:
> 
> while i agree that it is a bad idea to take headers into account

I wouldn't say that, it depends on exactly what you're doing and how
much you're basing your decision to reject on that single piece of data.

> as well as Barracuda networks started to do the same with their
> last firmware and so the spoofing protection kills *any* mailing
> list

What barracuda did was different, they used a policy list for deep
inspection of Recipient headers and rejected based on that which caused
problems because a policy list is only supposed to be checked against
the client connecting directly to your MX, not every IP in the Recipient
list.

> you missed "contains some non-existent user @ our local domain"

I was mainly basing my comment on the subject, "Can I reject when sender
doesn't appear in from: header?"

> however, mail is about SMTP and SMTP is about envelopes

I wouldn't exactly say that either, and don't feel the need to go into
all the different levels that statement fails in.


Peter

Reply via email to