Tracee wrote:
I'm a little green to SA & its rules but wouldn't it make sense to have
a rule that acts upon the
X-AntiAbuse: Original Domain: your.domain.here header?
If it matches your own domain name then give it high rating. There must
be a good reason why SA hasn't done this already so I'd like your input
before I attempt to write my own rule.
Actually, from what I can see that usually indicates the original domain
*to which the message was sent*. So unless the message was sent to a
mailing list or a forwarder, any server (legit or spam) that adds that
header *should* list your domain.
--
Kelson Vibber
SpeedGate Communications <www.speed.net>
