Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Martin G. Diehl
Kelson wrote: How did you whitelist borland.com? Did you use... whitelist_from whitelist_from_rcvd whitelist_from_dkim whitelist_from_spf ...etc? If you just used whitelist_from, it doesn't do any verification. It's a last-ditch option for cases where more reliable methods aren't possible.

RE: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Dan Barker
om server. Dan -Original Message- From: Martin G. Diehl [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 02, 2007 3:31 PM To: users@spamassassin.apache.org Subject: Spoofed from address but matched my whitelist -- please clarify Greetings, I have a piece of SPAM with an obviously spoofed (obvi

Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Kelson
How did you whitelist borland.com? Did you use... whitelist_from whitelist_from_rcvd whitelist_from_dkim whitelist_from_spf ...etc? If you just used whitelist_from, it doesn't do any verification. It's a last-ditch option for cases where more reliable methods aren't possible. So that would

Re: Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Michele Neylon :: Blacknight
Since you whitelisted all mail from the domain in question it got a negative score of -100 If you remove that score it jumps to over 23 points, which would have marked it as spam The fact that borland's A record may point to another IP is irrelevant. You have no way of knowing which IPs are

Spoofed from address but matched my whitelist -- please clarify

2007-05-02 Thread Martin G. Diehl
Greetings, I have a piece of SPAM with an obviously spoofed (obvious to me, that is) from address ... but didn't get flagged as SPAM. The message claims to originate from borland.com borland.com has IP 63.175.76.152 The message actually originates from napfehfu 86.60.37.183 borland.com is lis