> -----Original Message----- > From: Brad Hazledine [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 21, 2004 4:44 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Surprise mail from myself > > > > Has anyone written a rule that catches mail supposedly sent > by yourself to > yourself? > > Example here... > > Received: from WIN-SYEZX91ADBP ([61.50.222.200]) > by fargo.caledoncard.com (8.12.10/8.12.10) with SMTP id > i0L6pDT5006761 > for <[EMAIL PROTECTED]>; Wed, 21 Jan > 2004 01:51:14 > -0500 > Message-ID: <[EMAIL PROTECTED]> > From: "[EMAIL PROTECTED]" > <[EMAIL PROTECTED]> > To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > I whitelist everything from our own domain due to the fact > that reports > were constantly getting marked as spam for one reason or another. > Therefore this triggers the whitelist and the spam gets through. > It is starting to become more frequent. > > I have tried to write a rule that says "if it is from > yourself to yourself > but not received from your server then clobber it". > > However, the rule seems to pick up the "by > fargo.caledoncard.com" in the > header and thinks that all is well. > > If anyone out there has encountered this and found a way > around it then I > would appreciate some input. > > Thanks. > > Brad >
header __CS_FROM_ME From =~ /[EMAIL PROTECTED]/i header __CS_TO_ME To =~ /[EMAIL PROTECTED]/i meta CS_SPAM_TRICK __CS_FROM_ME && __CS_TO_ME describe CS_SPAM_TRICK Spammer forged From + To my domain. score CS_SPAM_TRICK 114.11 # Silly, isn't it? Change to your own email addy. Might want to change the score ;) Chris Santerre System Admin "You should never, never doubt what nobody is sure about."- Willy Wonka ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
