On Wed, 18 Oct 2006, Daniel Staal wrote: > Which would be nice, except that all of my mail is forwarded from a > commercial service to my personal mailserver. When this happens, the > mailservice puts in a 'Resent-From' header, with my own public address. > This obviously is screwing up my attempts to blacklist these spams. (Since > if SA sees a 'Resent-From' it ignores all other froms in the headers for > basic whitelists and blacklists.) > > Any ideas on how to get around this, using SA? (I can of course just > filter those using procmail, but I'd rather SA did my spam filtering.)
I assume the "From:" address is what you want to check? perhaps: header FNORD From=~ /[EMAIL PROTECTED]/i score FNORD 50 ? -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- ...the Fates notice those who buy chainsaws... -- www.darwinawards.com ----------------------------------------------------------------------- 13 days until Halloween
