On 15.01.20 11:02, AJ Weber wrote:
I'm hoping this is a relatively simple test...
I'm seeing emails "From Me, To Me", typically extortion types. I'm not
even seeing which of the SA tests are getting hit, because I have my
own email in my Whitelist.
Is there a way I can check IF From = m...@staticinfo.com AND Return-Path
!= FROM in a rule?
No. Also, you would refure many mail from mailing lists (where From: is your
addresse but envelope from "return-path" is mailing list).
I guess no matter what, I would have to remove my own email address
from the Whitelist?
Yes. Sending from the same address (or at least domain) is what spammers do
to exploit your whitelists.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
42.7 percent of all statistics are made up on the spot.
