In the latter case, you can use the suggested check
for domains,
It doesn't matter which other mail servers the clients use.
Kai
--
Get your web at Conactive Internet Services: http://www.conactive.com
Pearl?
Calum.
-Original Message-
From: John Hardin [mailto:jhar...@impsec.org]
Sent: 12 January 2010 21:18
To: 'users@spamassassin.apache.org'
Subject: Re: [sa] Faked _From_ field using our domain - how to filter/score?
On Tue, 12 Jan 2010, Charles Gregory wrote:
On Tue, 12 Jan 2010
On Tue, 12 Jan 2010, Callum Millard wrote:
: The problem is spam with a faked 'From:' field. Spammers are sending
: e-mails to our domain with the 'From:' field set to a valid e-mail
: address from our domain.
Key question: Can your users send mail 'From' their internal addresses via
ANY
On Tue, 12 Jan 2010, Charles Gregory wrote:
On Tue, 12 Jan 2010, Callum Millard wrote:
: The problem is spam with a faked 'From:' field. Spammers are sending
: e-mails to our domain with the 'From:' field set to a valid e-mail
: address from our domain.
Unfortunately, if you permit use of