Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-17 Thread Martin Schroeder
On 2002-12-16 18:36:47 -0500, Matt Kettler wrote: You're right, there's no blacklist_from_rcvd.. but do you really need/want such precautions there? But unblacklist_from_rcvd would make sense. Please? Best regards Martin -- http://www.tm.oneiros.de/calendar/2003/

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-17 Thread Justin Mason
Jonathan Duncan said: I have gotten a couple of vile spams that came through with NO problem whatsoever because of the test USER_IN_WHITELIST. It seems that the spammer used my email address in the To: field as well as the From: field. If all spammers did that, with my current

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-17 Thread Jonathan Duncan
Nope, this is my manual list and I have version 2.43 Jonathan Justin Mason [EMAIL PROTECTED] said: Jonathan Duncan said: I have gotten a couple of vile spams that came through with NO problem whatsoever because of the test USER_IN_WHITELIST. It seems that the spammer used my email

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-17 Thread Matt Kettler
At 11:11 PM 12/16/2002 -0700, Bob Proulx wrote: Matt Kettler [EMAIL PROTECTED] [2002-12-16 16:24:21 -0500]: Therefore I assume this is only available in versions newer than 2.31 somewhere. Is that correct? Yes, the current release version of SA is 2.43, and I think that feature was added

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-17 Thread Matt Kettler
Hmm, could you explain? If there's no blacklist_from_rcvd what purpose would unblacklist_from_rcvd fill? Unless you want to change the semantics of how the un commands work and what they mean, so you could do: blacklist_from [EMAIL PROTECTED] unblacklist_from_rcvd [EMAIL PROTECTED]

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-16 Thread Duncan Findlay
On Mon, Dec 16, 2002 at 07:14:54PM -, Jonathan Duncan wrote: I have gotten a couple of vile spams that came through with NO problem whatsoever because of the test USER_IN_WHITELIST. It seems that the spammer used my email address in the To: field as well as the From: field. If all

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-16 Thread Matt Kettler
some recommendations: 1) don't ever whitelist yourself. This kind of spammer behavior is SUPER common. A very noticeable portion of the spam I get is from my own address. 2) If you must whitelist yourself, use a whitelist_from_rcvd not a simple whitelist_from. 3) In fact, if you can avoid it,

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-16 Thread Jonathan Duncan
Matt, That makes a lot of sense. Thank you very much. I didn't see a blacklist_from_rcvd in the config documentation so I assume there isn't one. Similar precautions might be helpful, although it might be too much work to try to match bad address to the servers they might be sending from.

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-16 Thread Matt Kettler
You're right, there's no blacklist_from_rcvd.. but do you really need/want such precautions there? I mean.. if I declare a from address to be blacklisted, do I really care what server it came from? If a spammer forges a from address that is blacklisted, more power to him... If an innocent

Re: [SAtalk] What if a Spammer uses my email address in the From?

2002-12-16 Thread Bob Proulx
Matt Kettler [EMAIL PROTECTED] [2002-12-16 16:24:21 -0500]: 3) In fact, if you can avoid it, don't ever use a simple whitelist_from, and always use a whitelist_from_rcvd whenever possible. This closes a LOT of loopholes like the one you found here. Hmm... Which version of SA supports