Michael,

> > For amavisd -based lookups, only addresses from a SMTP
> > envelope matter, so whitelist the bounce.exacttarget.com.
> > Mail header is ignored for most purposes within amavisd.
>
> Yuck.
> In this case, with amavisd SQL user has to either whitelist:
> <[EMAIL PROTECTED]>
> (which will change for each email!)

A regexp-based whitelist is available, you can add some negative
score points for:  /[EMAIL PROTECTED]@bounce\.exacttarget\.com$/i
see amavisd.conf-sample -> @score_sender_maps -> new_RE(...)

> The amavisd SQL way IS safer! (harder for spammers to forge)

For spammers it is just as easy to forge From or envelope sender address.

> it just might conflict with VERP and SPF forwarding.

If the sending domain is signing with DKIM, one can also
use whitelist_from_dkim in SA.

> > For amavisd -based lookups, only addresses from a SMTP
> > envelope matter, so whitelist the bounce.exacttarget.com.
> > Mail header is ignored for most purposes within amavisd.
>
> What about (SA's SQL based?) AWL? Which one?  Either?

AWL is based on From address from the header.
See man Mail::SpamAssassin::Plugin::AWL

> > For SA-based whitelists, you have a choice of whitelisting
> > addresses from mail header (not from the SMTP envelope, which
> > is not seen by SA).
>
> Return-Path:
>   <[EMAIL PROTECTED]>
> From: "American Society for Quality" <[EMAIL PROTECTED]>

See man page Mail::SpamAssassin::Conf for
whitelist_from and whitelist_from_rcvd.

  Mark


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to