Adam Henry said: > I am seeking comments about a problem I have been faced with. > SpamAssassin seems to check the To: and CC: headers to determine > if address match expressions contained in one of the whitelists. > Since spammers forge their To: and CC: address anyways, this isn't a > very reliable field to base tests off of. > > I propose an easy way to change a setting which would allow one to > configure which header is used for verification of this type. Such a > change could be put in a local configuration file, and thereby avoiding > the need to modify code or fear that changes will be overwritten upon > upgrading.
Adam -- this is exactly why SpamAssassin exposes its rule system. header MY_WHITELIST X-My-Whitelist-Header =~ /yes/ describe MY_WHITELIST Contains my whitelist header score MY_WHITELIST -100 Just cut and paste those lines into /etc/mail/spamassassin/mywhitelist.cf; easy! And you can use any header you like. Patrick -- similar would apply for whitelisting on subject; use header MY_WHITELIST Subject =~ /magictag/ (BTW this should probably be a FAQ ;) --j. ------------------------------------------------------- This SF.net email is sponsored by: ApacheCon, November 18-21 in Las Vegas (supported by COMDEX), the only Apache event to be fully supported by the ASF. http://www.apachecon.com _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk