On 2021-03-20 11:19, @lbutlr wrote:
On 19 Mar 2021, at 17:11, Loren Wilton <lwil...@earthlink.net> wrote:
I just got this little wonder, and was surprised that it got thru as ham.

  From: "PayPal Billing" <douglescostamiche...@gmail.com>

I've fixed that locally, but I'd think SA ought to have a rule for "PayPal" that doesn't come from paypal.

It does, but it looks at the from email address.

maybe dkim blacklist freemail adresses, and then dkim whitelist payments ?

score FREEMAIL 10
whitelist_from_dkim *@paypal.com
score USER_IN_DKIM_WELCOMELIST -10

sorry not tested, but it might work

fail would be

whitelist_from_dkim *@gmail.com

Reply via email to