On Wed, 23 Aug 2006, Philip Prindeville wrote: > Hmm.... Maybe if I post with a more obvious subject line.... > > What is the notation for writing a "whitelist_from" or > "whitelist_from_rcvd" when the sender is <> ? (As in "MAIL FROM: > <>")
Are you sure you want to use that broad a brush? There is a *lot* of garbage that is sent as faked mailer daemon bounces. When dealing with a known correspondent's brokenness, it's safer to focus your permissiveness rather tightly. Try a meta rule that matches a Received: line on a bounce from them, add a rule that ANDs that meta with the rule that fires on their malformed date, and score it to cancel out the malformed date score. -- John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/ [EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- The problem is when people look at Yahoo, slashdot, or groklaw and jump from obvious and correct observations like "Oh my God, this place is teeming with utter morons" to incorrect conclusions like "there's nothing of value here". -- Al Petrofsky, in Y! SCOX ----------------------------------------------------------------------- 27 days until Talk Like a Pirate day
