Fritz,
That's what I'm saying.

Only the envelope-sender is added/compared to the whitelist (NotGreedyWhitelist)
Normal operation includes addresses in the FROM, SENDER, REPLY-TO,
ERRORS-TO, or LIST-* header fields.
This allows nearly all list email to be whitelisted. Check this option
to disable this. Will not do anything if you add/remove whitelist
entries via email-interface

I've got this unchecked, so shouldn't an email with a whitelisted
address that appears in the FROM line, but not the MAIL FROM, act as a
whitelisted sender?  Unless I've lost my mind (which is debatable),
this is the way it worked in 1.3x.  Now that we've made the jump to
v2, I can't see this behavior having been intentionally changed.

I can confirm that with our installation, if [email protected] is
whitelisted and [email protected] is in the from line but the
mail from is [email protected], the email is NOT
whitelisted.

It's definitely a big problem here and I don't know why it's
happening.  I don't know how many versions back this has been
happening with, I just noticed it.


On Sat, Oct 24, 2009 at 4:31 PM, Fritz Borgstedt <[email protected]> wrote:
> ASSP development mailing list <[email protected]>
> schreibt:
> >From is too easy to
>>spoof to use in a test, unless you are blocking a know from address
>>that abuses your system.
>
>
> That is correct, however ASSP DOES have an option (NotGreedyWhitelist)
> to whitelist/check based on
> from|sender|reply-to|errors-to|list-
>
>
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to