On Tue, 8 Aug 2006, jdow wrote:
From: "Logan Shaw" <[EMAIL PROTECTED]>
On Tue, 8 Aug 2006, jdow wrote:
From: "Logan Shaw" <[EMAIL PROTECTED]>
On Tue, 8 Aug 2006, qqqq wrote:
I have been having FPs from Ebay in AU and DE, as well as
[EMAIL PROTECTED]
Does anybody have a good whitelist for these?
So it seems like SPF is probably something good to rely on
in this case.
SMOMR - Simple Matter Of Meta Rules. If SPF is bad and says it is
from ebay add spam points.
I thought in this case the problem was false positives.
Presumably forged ebay mails are such a nuisance that all
kinds of rules (bayes?) hit, causing real ebay rules to get
flagged every now and then.
If SPF is good and says from ebay subtract some points in a
meta rule. That gets you going while any whitelist that uses
spf gets built.
But isn't that exactly what "spf_whitelist_from [EMAIL PROTECTED]"
does?
From what I can tell by looking at the source (specifically
the _check_spf_whitelist() sub), the spf_whitelist_from rule
matches if both (a) the from address matches the given pattern
([EMAIL PROTECTED]" in this case), and (b) the message passes SPF
checks. If the spf_whitelist_from rule does match, you will
get a
score USER_IN_SPF_WHITELIST -100.000
So, why create a meta-rule when there is a rule that already
does just what you're describing?
- Logan
