So I am seeing some of this stuff, and I want to block it based on headers.
So here's the header:
Return-Path: <[EMAIL PROTECTED]>
Received: from qmail.example.gov (localhost [127.0.0.1])
by qmail.example.gov (8.13.1/8.13.1) with ESMTP id l7JFvfer015649
for <[EMAIL PROTECTED]>;
dougp23 wrote:
> So I am seeing some of this stuff, and I want to block it based on headers.
> So here's the header:
>
> Return-Path: <[EMAIL PROTECTED]>
> Received: from qmail.example.gov (localhost [127.0.0.1])
>
> by qmail.example.gov (8.13.1/8.13.1) with ESMTP id l7JFvfer015649
>
>
Thanks for the response Matt.
I don't know why RCVD_IN_SORBS_DUL didn't fire off, it is in
/usr/share/spamassassin/50_scores.cf and when I do spamassassin -D --lint it
does say it is using that dir as the default dir for SA rules...
No, when I ping my mailserver, it answers with a real IP address
