On Tue, 14 Dec 2004, Andy Norris wrote:
>
> In that case, this leads to another question -- how, then, to reliably
> whitelist eBay? I would imagine they are a big target of forgers? I tried
>
> def_whitelist_from_rcvd [EMAIL PROTECTED] ebay.com
>
> but that didn't work. Now I just have
>
> whitelist_from [EMAIL PROTECTED] yes
>
> With IP addresses is there a greater chance of the server (theirs)
> crashing, and now the whitelist doesn't account for the backup mail server?
> Or if a company uses more than one mail server... getting all the IPs? Is
> this just something I should email support at eBay for and see if they've
> got something of a canned response for this?
>
> Any ideas why my first whitelist_from_rcvd rule might not have worked? It's
> in a custom rules file I have (TireSwing.cf)... I linted, and all seemed
> fine??
>
> Thanks,
> Andy
If everything is properly configured, (?:def_)?whitelist_from_rcvd
works just fine to whitelist mailing lists and major mail senders.
However it is a bit finikey and demands that particular things be
correct:
1) DNS resolution MUST work correctly.
2) trusted_networks MUST be set correctly.
In particular, the system you wish to whitelist must be handing
the messages to a system you trust & that system needs to be able
to successfully DNS resolve the address of the sender.
3) If the predictable sending address is only found in the envelope-From
header, that header must be made available to SA in a recognized
form. This is particularly pertinate for list messages such as this
one. The header-From is not predictable, only the envelope-From, so
that MUST be passed to SA for def_whitelist_from_rcvd to work
for whilisting this list.
With those caveats, def_whitelist_from_rcvd works just fine, I've got
a local config file with hundreds of them to make sure that all sorts
of potentially "troublesome" messages get properly delivered (EG lists
like this one, Yahoo groups messages, Airline notices, etc).
FYI, whitelist_from_rcvd entry for this list looks like:
whitelist_from_rcvd [EMAIL PROTECTED] apache.org
By using the wild-card for the mail host ([EMAIL PROTECTED]) it works
for lots of apache.org projects lists. ;)
My eBay entries looks like:
def_whitelist_from_rcvd [EMAIL PROTECTED] ebay.com
def_whitelist_from_rcvd [EMAIL PROTECTED] ebay.com
def_whitelist_from_rcvd [EMAIL PROTECTED] emailebay.com
def_whitelist_from_rcvd [EMAIL PROTECTED] emailebay.com
Dave
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
