"Rob MacGregor" <[EMAIL PROTECTED]> writes:

> I'd really like to see a blacklist_to option somewhere, or some other
> way of automatically tagging a given destination as indicating 99.99%
> probable spam.
> 
> Basically, I've got an email address that I have to have to host some
> web pages on my ISP.  The email address is linked directly to the name
> of the site (ie address [EMAIL PROTECTED] results in a web page of
> www.macgregor.isp.co.uk).  No valid email ever goes to that address as
> I've never given it out.  That means I can blacklist it safely, but I
> can't find a way to do so.

Here's what I do:

  header LOCAL_BAD_ADDRESS      Envelope-To =~ /foo\@bar\.com/i
  describe LOCAL_BAD_ADDRESS    Envelope address is a bad address
  score LOCAL_BAD_ADDRESS               4.0

If your MTA doesn't add a Envelope-To: header, you can change the rule
appropriately.  Just be careful that you don't match legitimate mail.

A blacklist_to might be worthwhile except that I'm not sure we want to
use To: and Cc: for this.  To: and Cc: don't actually indicate who is
receiving the messsage.  That's why I use Envelope-To: which is
unfortunately not used by all MTAs.

Dan

-- 
Daniel Quinlan                      Linux, open source, and
http://www.pathname.com/~quinlan/    anti-spam consulting


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to