Joseph Brennan wrote:
>
>
>
> --On Thursday, March 15, 2012 19:21 -0700 sporkman <sp...@bway.net> wrote:
>
>> -envelope-from is not from our domain, From: line in the message is,
>> being
>> able to clobber that pattern would be quite helpful by itself.
>
>
> Imagine one of your users sending mail to a list that another of your
> users subscribes to.
>
I can't quite see the case there. My rule specifically matches a mismatch
between the envelope-from and From: only when the From: purports to be one
our staff/role accounts. I had it in testing for the last few days with a
low score and it's doing pretty well.
Always open to more ideas though...
Charles
--
View this message in context:
http://old.nabble.com/Better-phish-detection-tp33478328p33529003.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
