Kelson wrote:
How did you whitelist borland.com? Did you use...
whitelist_from
whitelist_from_rcvd
whitelist_from_dkim
whitelist_from_spf
...etc?
If you just used whitelist_from, it doesn't do any verification. It's a
last-ditch option for cases where more reliable methods aren't possible.
om server.
Dan
-Original Message-
From: Martin G. Diehl [mailto:[EMAIL PROTECTED]
Sent: Wednesday, May 02, 2007 3:31 PM
To: users@spamassassin.apache.org
Subject: Spoofed from address but matched my whitelist -- please clarify
Greetings,
I have a piece of SPAM with an obviously spoofed (obvi
How did you whitelist borland.com? Did you use...
whitelist_from
whitelist_from_rcvd
whitelist_from_dkim
whitelist_from_spf
...etc?
If you just used whitelist_from, it doesn't do any verification. It's a
last-ditch option for cases where more reliable methods aren't possible.
So that would
Since you whitelisted all mail from the domain in question it got a
negative score of -100
If you remove that score it jumps to over 23 points, which would have
marked it as spam
The fact that borland's A record may point to another IP is irrelevant.
You have no way of knowing which IPs are
Greetings,
I have a piece of SPAM with an obviously spoofed (obvious to me,
that is) from address ... but didn't get flagged as SPAM.
The message claims to originate from borland.com
borland.com has IP 63.175.76.152
The message actually originates from napfehfu 86.60.37.183
borland.com is lis