On 24.08.07 13:46, [EMAIL PROTECTED] wrote: > imagin a newsletters or order mail sent by an seller website with the > from address : [EMAIL PROTECTED] > I have in my mail system an address like [EMAIL PROTECTED] > > With that, I can trace where my emails are sent in order to trace spam > and site that sell my email. > So, only [EMAIL PROTECTED] can send me mail on > [EMAIL PROTECTED] (theorical) > > The problem is that on a mailing list, the [EMAIL PROTECTED] > is used by spamer and they send me spam on [EMAIL PROTECTED] > > Is it possible to combine whitelist_from and whitelist_to in order to > tag "no spam" mails with 2 conditions : > whitelist_from [EMAIL PROTECTED] AND whitelist_to > [EMAIL PROTECTED] OK > > So, if a spammer [EMAIL PROTECTED] send me a mail on > [EMAIL PROTECTED], the second conditions will be OK but not > the first and spamassassin will considere it as spam !
the from address can be as easily faked as the to address. I have seen on this mailing list many reports from users whitelisting their own address somehow and thus getting false positives. What you are searching for, is whitelist_from_rcvd which combined from address with address of mailserver the mail was received from, or better, whitelist_auth, if the outgoing domain supports SPF (sellermail.com does not...) -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Your mouse has moved. Windows NT will now restart for changes to take to take effect. [OK]
