These are global rules for the company mail server.  I figured that any mail
sent internally would have the mail server IP listed, which would make an
excellent check rule.  Then if anyone spoofs the FROM, the lack of the mail
server IP would prevent the whitelist exception.

-Rob

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Skip
> Montanaro
> Sent: Tuesday, May 21, 2002 2:56 PM
> To: Rob Dege
> Cc: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] whitelist
>
>
>
>     Rob> Now SPAM's getting through this "loop hole".  Is there any way to
>     Rob> whitelist based upon Recipient to:, or am I just screwed?
>
> Can't you just define a "header" rule, such as
>
>     header REALLY_ME To =~ [EMAIL PROTECTED]/
>     describe REALLY_ME To: indicates it's for me
>     score REALLY_ME -5.0
>
> --
> Skip Montanaro ([EMAIL PROTECTED] - http://www.mojam.com/)
> "Excellant Written and Communications Skills required" - seen on chi.jobs
>
> _______________________________________________________________
>
> Don't miss the 2002 Sprint PCS Application Developer's Conference
> August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
>
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
>


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to