from the Mail::SpamAssassin::Conf manfile:
num_check_received { integer } (default: 2)
How many received lines from and including the original mail
relay do we check in RBLs (you'd want at least 1 or 2). Note
that for checking against dialup lists, you can call check_rbl
with a special set name of "set-firsthop" and this rule will
only be matched against the first hop if there is more than one
hop, so that you can set a negative score to not penalize people
who properly relayed through their ISP. See dialup_codes for
more details and an example
Ideally you'd want bondedsender only checked back to the first received-from line added by one of your MTAs and not any others. For DNSBLs you might want to search back a bit further to catch blacklisted servers in multi-hop relays, etc. It would probably be a pain to have separate "dns whitelist" vs "dns blacklist" num_checked_received values, but that might be a worthwhile feature for SA to have.
At 01:16 PM 10/17/2002 -0500, [EMAIL PROTECTED] wrote:
Or a spammers adds a Received line that makes it appears as if the message was relayed through bondedsender.com. Easily done. To the best of my knowledge, I think DNSBl lookups are only done on the IP communicating with your MTA. That's what I've always experienced with the DNSBls I use from Sendmail. SA could very well look back through a couple Received lines though. Can't say for certain. Seems unlikely to me though.Justin
------------------------------------------------------- This sf.net email is sponsored by: viaVerio will pay you up to $1,000 for every account that you consolidate with us. http://ad.doubleclick.net/clk;4749864;7604308;v? http://www.viaverio.com/consolidator/osdn.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
