> Then how about a test to check if the MAILFROM is syntax correct,
> meaning has some characters, the at sign, some characters, a period,
> and some more characters?
Seems to me that this would be appropriate to have as the default
envfrom test behavior, with a LOOSENENVFROM ON option in case admins
know that users at their site commonly send using unqualified
usernames (which usually would be whitelistable using other means, yet
in either case should be very rare).
I can't think of a reason why external senders using unqualified
usernames should be presumed innocent. Can anyone?
--Sandy
------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
SpamAssassin plugs into Declude!
http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
