> that is getting through. It should have failed.

Why should it have failed?

> WHITELIST_FROM [EMAIL PROTECTED]
[...]
> Return-Path: <[EMAIL PROTECTED]>

* You have whitelisted all mail from "[EMAIL PROTECTED]".
* The mail is from "[EMAIL PROTECTED]" according to the SMTP envelope.
= You have whitelisted the mail.

Solution: Don't whitelist everything that seems to be from you own domain(s) 
regardless of the relay it comes from.
Spammers (and fishers, and viruses) will send mail that is forged to look like 
they are from you domain(s).

Regards
/Jonas
-- 
Jonas Eckerman, FSDB & Fruktträdet
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/

Reply via email to