On Wed, 25 Mar 2009 01:35:53 +0100 (CET) "Benny Pedersen" <m...@junc.org> wrote:
> > On Tue, March 24, 2009 03:34, dsh979 wrote: > > > whitelist_from *...@whitelist3.com > > forged senders welcome :) > > hope *_from will be removed in next sa, its the badest check in > current sa of all tests :/ > > change to whitelist_auth rules I think they all have their place. Clearly you'd want to use whitelist_auth for the likes of paypal, but whitelist_from is almost certainly a better choice when there is a low probability of forgery, e.g. one obscure company whitelisting another.