I don't know much about the open source coding, but the commercial version had an option to "allow-recipient" ... maybe (following the example of your text below) something like whitelist_to ??? because lots of mailing lists have a specific list address to which all mail is sent (I know I have mail from the Army's automation professionals who run the "53list" which has [53L] in the subject line of every message ... then again, I don't know if SA looks at the subject line for specific words/characters ???)
Mary
-----Original Message-----
From: Bolero [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 07, 2003 3:43 PM
To: [EMAIL PROTECTED]
Subject: Re: [SPAM] [SAtalk] a very smart spammer. (score only 1.6)
But it scored quite nicely and blocked your message now, possibly because I adjusted WEB-BUGS a bit ... ;-) Today I got the only two false positives since I started trying out SA a week ago. Both with mails from this list containing spam. What's the easiest way to whitelist this mailing list? whitelist_from doesn't work because it doesn't work on the envelope-from. Making a rule for another header like Sender?
Kai