In order to get around this trick, I added a meta test which checked for the presence of our IP blocks in the received header, if found, do nothing, if missing, score enough to over-ride the white-list.
Then play cleanup with those using other connectivity. Frederic Tarasevicius Internet Information Services, Inc. Alan Fullmer wrote: > I guess essentially what I am trying to do is check the reply to: > because I am getting a lot of spoofs there, and it whitelists it. > > has anyone found a way around this? > > > ----- Original Message ----- > From: "Matt Kettler" <[EMAIL PROTECTED]> > To: "Alan Fullmer" <[EMAIL PROTECTED]>; > <[EMAIL PROTECTED]> > Sent: Monday, September 01, 2003 1:54 PM > Subject: Re: [SAtalk] plz help? question regarding to from and > expressions. > > >> At 09:05 PM 8/31/03 -0600, Alan Fullmer wrote: >>> >>> I'm trying to learn how to write certain expressions. >>> >>> I've tried several ways to do this, but have come to the conclusion >>> i am a noob at this. >>> >>> I am trying to write a rule that checks to see if the Return-Path: >>> =equals= the To: >>> >>> if Return-Path == To >>> >>> If someone could help me out, I'd greatly appreciate it. No >>> success yet. but am learning :-) >> >> Sorry to say it, but what you want to do is fundamentally not >> possible in an ordinary SpamAssassin rule. >> >> You'd have to edit the code and create an eval test in perl code to >> do that. The old "from and to are same" rule was implemented in >> code, not as a plain rule. >> >> Spamassassin rules are nothing more than perl regular expression >> searches. As such, they have absolutely no ability to compare >> arbitrary strings between different parts of the message. >> >> Now, being regular expressions you can do some really complicated >> tests against a single part of a message. You can also use meta >> rules to see if two rules are true at the same time. But you can't >> compare two headers with a normal rule. >> >> The only proper syntax that I know of for a header rule is: >> >> header <symbolic_name> <header to test> =~ <regular expression> >> >> >> >> >> >> >> > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
