At 12:45 -0700 2003-07-28, Vicki Brown wrote: >At 07:44 -0400 2003-07-28, Gilson, Larry wrote: >>You might want to read the FAQ below. >>It does not specifically answer your question >knowing a bit more about the precise class of problem (i.e. spammer is >pretending to be internal), it could be made to help... > >I might be able to work with it; e.g. I can raise the score for anything >spoofed as being in our net that isn't legitimate... but that's still a >workround, methinks > >By the way, do NOT implement the the solution as provided in the FAQ without >being very specific with machine names or exact IP addresses. The spammer >in my situation is spoofing the 192.168 net!
> Nope. I don't think I can use rules here. The 192.168.*.* (or 10.*.*.*) nets are legitimate in the Received lines. They may or may not be internal but they could easily be legitimate. I can't just assume that anything Received from 192.168 that doesn't match our boxes IPs is bad. This has to be solved inside SpamAssassin's AWL checking. -- - Vicki Vicki Brown ZZZ Journeyman Sourceror: P.O. Box 1269 zz |\ _,,,---,,_ Scripts & Philtres San Bruno, CA zz /,`.-'`' -. ;-;;,_ Perl, Unix, MacOS 94066 USA |,4- ) )-,_. ,\ ( `'-' http://philtres.com mailto:[EMAIL PROTECTED] '---''(_/--' `-'\_) http://www.cfcl.com/vlb ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
