Re: multiple from entries

2011-04-10 Thread David F. Skoll
On Sun, 10 Apr 2011 08:30:46 -0400 Michael Scheidell wrote: > header __MANY_SENDER sender =~ /@.*@/ Trying to match email addresses with regexes is dangerous. The string: "funny@last"@roaringpenguin.com is a valid email address. Check the RFCs if you don't believe me. (That being sai

Re: multiple from entries

2011-04-10 Thread Michael Scheidell
On 4/9/11 10:51 AM, David F. Skoll wrote: So you could (I suppose) legitimately reject a message with multiple From: addresses that lacks a conforming Sender: header. __L_HAS_SNDR looks for sender(s). BUT we need a 'one sender' rule so, a meta rule like: meta __MANY_FROM && ! __ONE_SENDER

Re: multiple from entries

2011-04-09 Thread David F. Skoll
On 9 Apr 2011 14:29:24 - "John Levine" wrote: > >Anyone know of any legitimate use of multiple email addresses in a > >from line? > Yes. I know a few IETF people who do it. Stuff like notes to a > working group from both chairs. RFC 5322 does allow multiple addresses in the From: field, bu

Re: multiple from entries

2011-04-09 Thread John Levine
>Anyone know of any legitimate use of multiple email addresses in a from >line? Yes. I know a few IETF people who do it. Stuff like notes to a working group from both chairs. I think I've seen the same multiple-from spam you have. It appears to confuse Mailman, but that's not postfix's problem

multiple from entries

2011-04-09 Thread Michael Scheidell
Ok, I think its stupid, and don't know what the spammers are trying to acomplish, except to hope that one of the entries is whtelisted. But, a from header of: From: user@domain,com, us...@domain.com, us...@domain.com.. (on to 20 users) is just plain stupid. It SHOULD be blocked at the MTA, e