From: "Carlo C Henrico" <[EMAIL PROTECTED]>
> Hi All
>
> I am fairly new to this, but I have a question which I have not been able
to
> see in the FAQ's (so far).
>
> I am using Spamassassin on Linux 9 (White Box) with Amavisd.
>
> I have set up the system to send notifications of spam to
> [EMAIL PROTECTED]
>
> It however has a subject of "SPAM FROM <[EMAIL PROTECTED]>".
>
> Is there any way to change this to "SPAM FROM <[EMAIL PROTECTED]> TO
> <[EMAIL PROTECTED]>"?
Carlo, are you SURE you are sending the automatic notification to the
right place? Are you willing to bet your life on it? I ask because one
of my customers is old Nick himself and I'm supposed to pick up sure
things like this one.
Seriously, this is a very very important "do not do that" unless you
are willing to bet your soul you get it right with very few exceptions.
The reason behind this is the rampant forgery in email headers. In
particular "From: " and "Reply-To: " and even "Return-Path: " are all
forged most of the time. So you have to pick apart the header working
backwards until it does not track, figure out why it does not track,
and THEN worry about notification. Generally this uses a lot of machine
resources. So few people bother to do this.
Meanwhile that smokin' fool wearing the all red body, hooves, horns,
and pitchfork is breathin' heavy sensing another good soul about to go
baaaaad.
{^_^}
