whitelist_auth / blacklist_from

[Reindl Harald]

well, that below could only work if the SPF-check would also hit the FROM-header and not only the envelope, in reality "blacklist_from" hits both but in case of a bounce / auto-reply with the null-sender you block it - that's bad because otherwise you could stop forging

score USER_IN_BLACKLIST 50.0
score USER_IN_SPF_WHITELIST -100.0
score USER_IN_DKIM_WHITELIST -100.0
whitelist_auth *@paylife.at
whitelist_auth *@sparkasse.at
blacklist_from *@paylife.at
blacklist_from *@sparkasse.at

signature.asc
Description: OpenPGP digital signature