----- Original Message ----- From: "Jesse Guardiani" <[EMAIL PROTECTED]> > > Jesse, > > > > Sorry for sounding like a dummy but can you explain point # 2 for me? The > > envelope sender is what a user sees in their email client right? > > No. The envelope sender is what the mail server uses when it needs to bounce > a message back to the sender. Usually the user never sees this address in the > email, but some mail filters, like TMDA, embed the envelope sender in the > headers as something like: > > Return-Path: [EMAIL PROTECTED] > > But most MTAs don't (AFAIK). > > The header from address is the From address the user sees. This is usually > identical to the envelope sender address, but CAN be totally different. > > Qmail's badmailfrom file only checks the envelope sender, AFAIK. > > > > > So your > > script compares that to the email in the header right? I'm not sure I > > understand why that is effective? > > Checking both the envelope sender and the header From: address is effective > because spammers don't always set them to be the same thing. If you just > block based on envelope sender, your users may still receive emails with > the address you're trying to block in the header From:. And the header From: > address is all the user ever sees, so it makes sense to block based on the > header From:. > > > > Does a spammer not just set them both > > the > > same? > > Sometimes. Sometimes they don't. > > > > Am I correct in saying that the email headers from address is > > populated from the envelope sender? > > No. They are totally different addresses. Sometimes they contain the > same thing, but they don't have to.
Jesse, Thank you for that explanation. That makes sense. So what does your script / program do if the envelope sender is blank or non existent? Or does that not happen? Also what is AFAIK ? Thanks Malcolm ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
