There are two tests I would like to use to whitelist incoming email.
a) If it's References: or In-Reply-To: header matches a Message-ID
of a mail sent out through my server. This would require
a) recording M-IDs of outgoing emails ina formail -D
manner
b) expiring M-IDs from that list based on available
database-size and/or time in the DB
c) checking incoming email against that list
b) if incoming PGP/GPG-signed email has a matching public key
in a keyring accessible by SpamAssassin (or MailScanner)
Has anyone implemented anything like this? Any hints on how to
best go about this? Or any other opinion on these (eg why these
may be bad ideas)?
I am running SpamAssassin though MailScanner, so implementation
in MailScanner or SpamAssassin would be welcome..
regards
--
[EMAIL PROTECTED]
