Mike Staver <[EMAIL PROTECTED]> wrote: > > I'm seeing a new kind of spam issue this week - where these evil, evil > bastards are now sending me mail from some made up user @fimble.com
I solved this issue at a site, by only selectively scanning messages (using procmail). Procmail would only call spamassasin if the mail contained a Received: header which indicated it was processed by our external mail gateway. If no such header was found, then the message had ONLY been sent internally, and thus there was no need to scan it at all. Saves processing time, too. :0fw * < 256000 * ^Received: .*(my-external-gateway.fimble.com) spamc If you have multiple gateways through which mail can travel, simply include them all: :0fw * < 256000 * ^Received: .*((gateway1|gateway2|gateway3).fimble.com) spamc -- [EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience. sometimes known as David DeSimone || Experience comes from bad judgment." ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk