Karl Pearson a écrit :
> On Sat, 11 Oct 2008, Matus UHLAR - fantomas wrote:
>
>>> On Fri, October 10, 2008 17:05, Liam-PrintingAutomation wrote:
>>>> any email with a FROM as coming from our domain but is not a user
>>>> (left
>>>> of @ sign) that isn't one of these X addresses?
>>
>> On 10.10.08 21:01, Benny Pedersen wrote:
>>> what rule gives -100 ?
>>
>> whitelist, of course: "any email with a FROM as coming from our domain"
>> That's common mistake of adding local domain to whitelist_from, often
>> used
>> by spammers to get mail through.
>>
>>> there is a number of ways to make sure its not giveing -100 to own
>>> domains
>>> that is sent outside of localhost or even from localhost olso
>>>
>>> adjust the score -100 to something like -0.01 and make use of
>>> dkim/spf to
>>> compensate for real users thar send correct not just have your
>>> domain in
>>> sender from
>>
>> simply using whitelist_auth or whitelist_from_rcvd instead of
>> whitelist_from
>> should be enough
>
> I use whitelist_from_rcvd but am not sure I use it right:
>
> whitelist_from_rcvd [EMAIL PROTECTED] ourldsfamily.com
>
> Is that right?

In general, yes.

This wouldn't be right if ourldsfamily.com is a large domain with "bad"
clients. for example, you wouldn't do that with a (large) ISP.

>
> Also, I've never heard of whitelist_auth and am curious to see an
> example. Would using both _auth and _from_rcvd be good/better/worse?


whitelist_auth whitelists the message under SPF or DKIM or DK success.

The right combination depends on the domain.

Reply via email to