----- [EMAIL PROTECTED] wrote: > The LOCAL_RCVD line in question probably came from the > "Fairly-Secure Anti-SPAM Gateway" walkthrough, specifically: > http://flakshack.com/anti-spam/wiki/index.php?page=Installing+and+Configuring+SpamAssassin > I'm assuming you had tailored that rule to your own installation, > i.e. \.ourdomain\.com might be \.epigeon\.com > > We ran into this same problem, apparently some spammer was > adding Received: lines that matched our tailored LOCAL_RCVD rule. > Since in our case our Amavisd machine only handles incoming > mail and not internal or outgoing mail, removing that rule > solved the problem. In your case, if internal mail is going > through your machine, you'll either have to forego the -50 > "whitelisting" rule or figure out a better, less forgeable, > way to identify local machines. > > I'd added a paragraph to the Wiki a couple months ago suggesting > leaving that rule out, so future readers can avoid or at least > be aware of this problem. > > David Godshall, Network Manager > Hesston College, [EMAIL PROTECTED] > http://www.hesston.edu/
David, Thank you for the reply that is not where I got it from but glad you pointed that doc out to me :) It is probably better that I do this with amavis vice SA anyway. I think my regex was wrong I will compare mine to this doc here that you have posted. I say that because usually you can see the forged headers. Looking at this email this email actually properly announced where it was coming from which was some server in France so I have no clue why it matched that rule anyway, but time to break out the regex book because obviously I have it wrong. But like I said, a solution that was recommended to me about doing it winthin Amavisd.conf vice SA is probably a better approach. Thank you ------------------------------------------------------- All the advantages of Linux Managed Hosting--Without the Cost and Risk! Fully trained technicians. The highest number of Red Hat certifications in the hosting industry. Fanatical Support. Click to learn more http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642 _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
