On 08/14/2013 05:28 PM, Nigel Smith wrote:
Because some Webmail providers don't use a proper Received: header
for the initial hop, but add an X-Originating-IP: header instead.
Two things that bother me about that reply. First, SA *should*
know about the major filtering providers (Bigfish, Postini etc.) and
be able to deal with them accordingly.
SA does it right - see last-external for the different lookup types.
SA knows nothing about IPs. it only knows about what to lookup and the
BL config works correctly when rules are correct. If you decide to break
the logic an do deep header checks on the wrong BL then your stuck.
Second, X-Originating-IP, as
in the IP address of the end-user terminal that's logged into webmail
? What's the point of parsing that ?
African 419 sender thankfully detected by Spamcop?
