----- On May 11, 2017, at 8:04 AM, Anthony Hoppe aho...@sjcourts.org wrote:
> ----- On May 11, 2017, at 6:02 AM, RW rwmailli...@googlemail.com wrote: > >> On Thu, 11 May 2017 12:19:37 +0000 >> David Jones wrote: >> >>> From: Anthony Hoppe <aho...@sjcourts.org> >>> >>> >Can I whitelist based on a combination of the Received header and >>> >domain in the Return-Path? >>> >>> >Here are headers from one of the messages: >>> >https://pastebin.com/ijy9Z51y >>> >>> >I'm thinking something like... >>> >>> >whitelist_from_rcvd @sjcourts.gmail.net-login.com >>> >phishtest.knowbe4.com >>> >>> I am not sure if it will use the Return-Path. Normally you need to >>> find the envelope-from and use that address but I am not seeing it >>> based on those headers. >> >> It will work with several sources of from address including the from >> header and the envelope. In this instance the envelope sender will come >> from return-path. > > > Good to know. I will give this a try and see how it goes. > > whitelist_from_rcvd *@sjcourts.gmail.net-login.com phishtest.knowbe4.com Looks like that works! https://pastebin.com/6Atp71f4
