Is there a way write a rule such that I could tell if mail originated
on my network or if it came into it from outside of it?
At work I need to make sure mail from my own network does not get
tagged as looking like spam no matter what the contents of the
messages look like. Therefore I would like to whitelist my work
domain.
whitelist_from [EMAIL PROTECTED]
That is not a good spam filter and a class of spam will come right
through since anyone can forge the From: header address. All spam
with forged From: addresses push right through. The biggest class of
spam with this is forged From: headers the same as the To: recipient.
Therefore I try to use whitelist_from_rcvd to avoid this.
whitelist_from_rcvd [EMAIL PROTECTED] example.com
But that also does not work since all external mail to me comes
through a series of border machines which all have my domain in them.
My machine is not really connected to the Internet. I am only on an
isolated local internet with gateway machines in the path for mail
relaying between the internal and external networks. At the end of
this message see an example section of Received: headers for a sample
of my situation. whitelist_from_rcvd seems better at whitelisting
other domains rather than your own domain.
Basically I am stuck on how to know if _all_ of the Recieved headers
are in my domain in which case I want to whitelist it. But if even
just one of them is not then it is suspect and I want to score it
normally.
How have other people solved this problem?
Thanks
Bob
Received: from tiger.example.com (tiger.example.com [10.0.0.101])
by bear.example.com (Postfix) with ESMTP id 83A4713957
for <[EMAIL PROTECTED]>; Wed, 16 Oct 2002 00:36:16 -0600 (MDT)
Received: from lion.example.com (lion.example.com [10.0.0.100])
by tiger.example.com (Postfix) with ESMTP id 3436937F89
for <[EMAIL PROTECTED]>; Wed, 16 Oct 2002 00:36:16 -0600 (MDT)
Received: from highway (unknown [210.77.102.219])
by lion.example.com (Postfix) with SMTP id C58C5A00C25
for <[EMAIL PROTECTED]>; Wed, 16 Oct 2002 02:36:11 -0400 (EDT)
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
