Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Martin G. Diehl
Kelson wrote: How did you whitelist borland.com? Did you use... whitelist_from whitelist_from_rcvd whitelist_from_dkim whitelist_from_spf ...etc? If you just used whitelist_from, it doesn't do any verification. It's a last-ditch option for cases where more reliable methods aren't possible.

RE: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Dan Barker
whitelist_from_rcvd [EMAIL PROTECTED] borland.com will probably do what you want. Although Borland doesn't publish an SPF, you find all their MXs have borland.com rDNS. You'd have to watch it a while to see if you miss any legitimate Borland email that's not via a borland.com server. Dan -

Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Kelson
How did you whitelist borland.com? Did you use... whitelist_from whitelist_from_rcvd whitelist_from_dkim whitelist_from_spf ...etc? If you just used whitelist_from, it doesn't do any verification. It's a last-ditch option for cases where more reliable methods aren't possible. So that would

Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Michele Neylon :: Blacknight
Since you whitelisted all mail from the domain in question it got a negative score of -100 If you remove that score it jumps to over 23 points, which would have marked it as spam The fact that borland's A record may point to another IP is irrelevant. You have no way of knowing which IPs are