On Tue, 8 Aug 2006, jdow wrote:
From: "Logan Shaw" <[EMAIL PROTECTED]>
On Tue, 8 Aug 2006, qqqq wrote:
I have been having FPs from Ebay in AU and DE, as well as
[EMAIL PROTECTED]
Does anybody have a good whitelist for these?
So it seems like SPF is probably something good to rely on
in this case. I don't fully understand the SPF plug-in,
but perhaps all you need to do is add the appropriate ebay
domains to new def_whitelist_from_spf rules like the ones
in 60_whitelist_spf.cf.
SMOMR - Simple Matter Of Meta Rules. If SPF is bad and says it is
from ebay add spam points.
I thought in this case the problem was false positives.
Presumably forged ebay mails are such a nuisance that all
kinds of rules (bayes?) hit, causing real ebay rules to get
flagged every now and then.
But since all the info about which servers to whitelist is
right there in the SPF records that eBay supplies, and since
we know that eBay itself doesn't send spam, it seems like
some whitelist_from_spf rules (which, as I understand it,
whitelist an address or address pattern, but conditionally on
it passing SPF checks) should be all that's necessary.
Something like this:
whitelist_from_spf [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL
PROTECTED] [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED] [EMAIL PROTECTED]
whitelist_from_spf [EMAIL PROTECTED]
Note that [EMAIL PROTECTED] is a judgement call since on the one hand
it's already in 60_whitelist_spf.cf and on the other hand,
it has a def_whitelist_from_spf rule, which gets a lower score
than whitelist_from_spf.
- Logan
