>At 10:58 AM 8/14/2003 -0700, Greg Webster wrote:
>>'[EMAIL PROTECTED]' is not in our whitelist, and neither is '[EMAIL PROTECTED]' or
>>any variant.
>>
>>It appears that there is a problem with the USER_IN_WHITELIST regexp
>to>me, but I may be mistaken. I can't think of any other way that this
>>w
We get alot (well, used to) of spam that has forged from/return-path
headers. Whitelisting like that isn't really the most effective really.
One thing you could do is that if you have a DNSRBL system setup for
internal use is that you could add the smtp servers that your users use
to that DNSRB
At 01:17 PM 8/14/2003 -0700, Greg Webster wrote:
How so? The spammer is 'From: [EMAIL PROTECTED]' and 'To:
[EMAIL PROTECTED]' is a user inside our domain. Yes, we have [EMAIL PROTECTED]
whitelisted, but not [EMAIL PROTECTED]
I'm boggled here...how is the Return-Path getting our local user
('[EMAIL
Thanks, it is. What I'm wondering now is how the local user's address is
in the Return-Path header. Unless the spammer is forging the Return-Path
header (making it the same as the recipient), in which case we can't
really trust the Return-Path header at all for whitelisting.
Greg
On Thu, 14 Aug
At 10:58 AM 8/14/2003 -0700, Greg Webster wrote:
'[EMAIL PROTECTED]' is not in our whitelist, and neither is '[EMAIL PROTECTED]' or
any variant.
It appears that there is a problem with the USER_IN_WHITELIST regexp to
me, but I may be mistaken. I can't think of any other way that this
would have mad
Hi all,
Here is the headers from a recent spam that got through (addresses
changed to protect them):
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: by intouch.ca (Postfix, from userid 1002)
id 282772092; Thu, 14 Aug 2003 10:40:54 -0700 (PDT)
Received: from 192
At 12:55 PM 6/27/03 +0200, Holger Glaess wrote:
please help
some users got mails with this score but i dident allow user_prefs or
whitelists
(only a central config where only root have access.)
USER_IN_WHITELIST (-100.0 points)From: address is in the user's white-list
i have no idea to change
please help
some users got mails with this score but i dident allow user_prefs or whitelists
(only a central config where only root have access.)
USER_IN_WHITELIST (-100.0 points)From: address is in the user's white-list
i have no idea to change this .
can somebody help
holger
