On Tue, 2009-07-14 at 23:14 -0700, Herb Eppel wrote:
> No doubt this has been discussed before and apologies for any repetition, but
> I can't find the answer in the archive.
>
> I have set SA to reject all mail that isn't addressed to specific addresses,
SA does not reject, bounce, deliver nor delete mail. SA filters mail,
scoring it, and leaves any action whatsoever up to other tools in your
mail processing chain.
You cannot "set SA to reject", though you can have SA assign really high
scores based on specific patterns in mail.
> but quite a lot of spam gets through by using arbitrary addresses in the To
> field and a 'good' address in the Envelope-to field.
>
> How can I rectify this?
Depends on your actual problem, settings, and your definition of
"getting through".
(a) Which settings exactly are you about? How did you configure SA to
allow only specific addresses?
Also keep in mind what Bernd said, the envelope To may apply to the
setting, too. Or even the envelope From, which was not mentioned at all,
in case of a bad whitelist_from for example.
(b) What exactly do you mean by "getting through"? Not being "blocked"?
In a scoring context like SA, the world is not black and white. There's
a lot of gray, dull and shady colors.
So, what *score* do these messages get? And which *rules* do they hit?
(c) If all else fails, do provide all custom settings relevant to the
subject at hand. And of course, a raw sample [2] or two, showing all
headers unmunged.
guenther
[1] Do not post them directly to the list, upload it somewhere, possibly
a pastebin, and provide a link.
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
