Ok, I think I see what you man here - saying that I could use this
procmail filter... and I could then blacklist fimble.com so any external
mail from fimble.com gets blocked. My issue still is though that
fimble.com is whitelisted, so blacklisting it sets the score back to 0,
and not 100 like I would prefer. This will help though - because all
internal mail will be auto-whitelisted. Thanks for the info, I think it
will work nicely... I just have one more newbie-like question - when you
say gateway that mail can travel through... would that include a cisco
2600 T1 router? I have my MX records pointed at just my server, so I
guess I don't know the technical details of the path mail takes to get to
my server. Thanks again for the info.
On Thu, 17 Jul 2003, Fuzzy Fox wrote:
> Mike Staver <[EMAIL PROTECTED]> wrote:
> >
> > I'm seeing a new kind of spam issue this week - where these evil, evil
> > bastards are now sending me mail from some made up user @fimble.com
>
> I solved this issue at a site, by only selectively scanning messages
> (using procmail).
>
> Procmail would only call spamassasin if the mail contained a Received:
> header which indicated it was processed by our external mail gateway.
> If no such header was found, then the message had ONLY been sent
> internally, and thus there was no need to scan it at all.
>
> Saves processing time, too.
>
> :0fw
> * < 256000
> * ^Received: .*(my-external-gateway.fimble.com)
> spamc
>
> If you have multiple gateways through which mail can travel, simply
> include them all:
>
> :0fw
> * < 256000
> * ^Received: .*((gateway1|gateway2|gateway3).fimble.com)
> spamc
>
>
--
-Mike Staver
[EMAIL PROTECTED]
[EMAIL PROTECTED]
http://www.fimble.com/staver
-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
