On 25 February 2002, Bart Schaefer said: > I've been getting junk religious tracts with a return-path (and errors-to) > like > > Return-Path: <[EMAIL PROTECTED]> > > I'd like to "blacklist_from *MyInJesus.com" but the From: address is > @earthlink.net.
I find the best way to deal with spammers who persistently use the same envelope sender is to ban them at the MTA, so they get kicked out at SMTP time and never come close to SpamAssassin (or any of your other mail processing chain). With Exim 3, you can do this with sender_reject; with qmail, it's control/badmailfrom. Dunno about other MTAs. > Obviously I can define a "header" test, but I'd like something that works > from user_prefs with spamd. As I understand it, SA generally only looks at the "From" header because that's all you can rely on the MTA supplying. Some MTAs put the envelope sender in an environment variable, sometimes "Return-path" has it, but there's nothing standard. So I think you'll probably have to write your own test that looks at "Return-path" for this one (assuming you can't or don't want to reject that spam at SMTP-time). Greg -- Greg Ward - software developer [EMAIL PROTECTED] MEMS Exchange http://www.mems-exchange.org _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk