> -----Original Message-----
> From: David Hubbard [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 29, 2003 2:41 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Rule for looking at envelope sender?
>
>
> How can one look at the envelope sender of a message
> in a rule? Is there a variable available to SA for
> that? I'm trying to block messages from what I call
> the stderr spammer because they use hundreds of domain
> names and keep changing ISP's but the emails always
> use an envelope sender of [EMAIL PROTECTED]<domain>.com
>
> I tried "blacklist_from [EMAIL PROTECTED]" but that didn't work.
>
qmail puts Envelope-Sender in the headers, postfix puts Return-Path I
believe. spamassassin looks for both to check your whitelist_from's
against.... notice how all 3 below work....
[EMAIL PROTECTED] root]# echo -e "Envelope-Sender: [EMAIL PROTECTED]" | spamc -u
[EMAIL PROTECTED]
Envelope-Sender: [EMAIL PROTECTED]
X-Spam-Report: -21.1 points, 4.0 required
* 1.9 DATE_MISSING Missing Date: header
* 2.0 FROM_NO_LOWER 'From' has no lower-case characters
* -25 USER_IN_WHITELIST From: address is in the user's
white-list
[EMAIL PROTECTED] root]# echo -e "Return-Path: [EMAIL PROTECTED]" | spamc -u
[EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
X-Spam-Report: -21.1 points, 4.0 required
* 1.9 DATE_MISSING Missing Date: header
* 2.0 FROM_NO_LOWER 'From' has no lower-case characters
* -25 USER_IN_WHITELIST From: address is in the user's
white-list
[EMAIL PROTECTED] root]# echo -e "From: [EMAIL PROTECTED]" | spamc -u
[EMAIL PROTECTED]
From: [EMAIL PROTECTED]
X-Spam-Report: -24.4 points, 4.0 required
* 0.2 NO_REAL_NAME From: does not include a real name
* 1.9 DATE_MISSING Missing Date: header
* -1.5 BAYES_01 BODY: Bayesian spam probability is 1 to 10%
* [score: 0.0131]
* -25 USER_IN_WHITELIST From: address is in the user's
white-list
would be nice if it were a standard across all MTA's... something like
X-Envelope-Helo:
X-Envelope-Mail-From:
X-Envelope-Rcpt-To:
Dallas
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
