Re: spam from own email address

[lists]

I would investigate using rspamd rather than spamassassin. At the moment I run neither since I have settled upon a nice mix of RBLs and check the reverse pointer. That Perl code to get rid of dynamic domains really helps nuke spammers. Spamassassin tends to use a lot of memory. When I was using it, I had it on a rather memory limited VPS and actually needed to use VM. I get a fake email from my address about once a week. I can tolerate that.  From: pm...@iljones.net Sent: April 23, 2019 9:11 AM To: postfix-users@postfix.org Subject: Re: spam from own email address Thanks for all the suggestions: - I have an SPF record, but postfix not rejecting these, presumably because the enveloper sender is valid - I am not using SpamAssassin, but I'm coming round to the idea! - John: this idea seems simple and effective, I will give it a try. Many thanks, Ian Le 23/04/2019 à 18:02, John Peach a écrit : On 4/23/19 11:54 AM, Ralph Seichter wrote: * John Peach: /^From:.*\@example\.com/ REJECT This header check will not catch the envelope sender, so I suggest adding "check_sender_access pcre:/path/to/sender_access" to the mix (file content according to your needs, of course). It is not meant to catch the envelope sender. That should be in your normal checks. This is specifically for the data From:, which is what these are using. -Ralph