----- On May 11, 2017, at 6:02 AM, RW rwmailli...@googlemail.com wrote: > On Thu, 11 May 2017 12:19:37 +0000 > David Jones wrote: > >> From: Anthony Hoppe <aho...@sjcourts.org> >> >> >Can I whitelist based on a combination of the Received header and >> >domain in the Return-Path? >> >> >Here are headers from one of the messages: >> >https://pastebin.com/ijy9Z51y >> >> >I'm thinking something like... >> >> >whitelist_from_rcvd @sjcourts.gmail.net-login.com >> >phishtest.knowbe4.com >> >> I am not sure if it will use the Return-Path. Normally you need to >> find the envelope-from and use that address but I am not seeing it >> based on those headers. > > It will work with several sources of from address including the from > header and the envelope. In this instance the envelope sender will come > from return-path.
Good to know. I will give this a try and see how it goes. whitelist_from_rcvd *@sjcourts.gmail.net-login.com phishtest.knowbe4.com
