Re: [sa] Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Kai Schaetzl
In the latter case, you can use the suggested check for domains, It doesn't matter which other mail servers the clients use. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

RE: [sa] Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Callum Millard
Pearl? Calum. -Original Message- From: John Hardin [mailto:jhar...@impsec.org] Sent: 12 January 2010 21:18 To: 'users@spamassassin.apache.org' Subject: Re: [sa] Faked _From_ field using our domain - how to filter/score? On Tue, 12 Jan 2010, Charles Gregory wrote: On Tue, 12 Jan 2010

Re: [sa] Faked _From_ field using our domain - how to filter/score?

2010-01-12 Thread Charles Gregory
On Tue, 12 Jan 2010, Callum Millard wrote: : The problem is spam with a faked 'From:' field. Spammers are sending : e-mails to our domain with the 'From:' field set to a valid e-mail : address from our domain. Key question: Can your users send mail 'From' their internal addresses via ANY

Re: [sa] Faked _From_ field using our domain - how to filter/score?

2010-01-12 Thread John Hardin
On Tue, 12 Jan 2010, Charles Gregory wrote: On Tue, 12 Jan 2010, Callum Millard wrote: : The problem is spam with a faked 'From:' field. Spammers are sending : e-mails to our domain with the 'From:' field set to a valid e-mail : address from our domain. Unfortunately, if you permit use of