On Mon, 7 Oct 2002 14:18:52 +0200
"Tor Atle H.Kleven" <[EMAIL PROTECTED]> wrote:
>>> And, is there ANY way to filter mail that does NOT have the same
>>> email-address in "From:" and in "Return-Path:"? Getting to sort out
>>> these mails would help A LOT in filtering spam and virus.
>> I don't think that can be done. Such a filter wouldn't catch spam
>> only though. Interactive mailinglists have that too. Whereas most
>> virus mails have a matching from and reply-to. Come to think of it,
>> most of the spam I receive also has a matching from and reply-to.
> No no no. Not "reply-to" - but "Return-path". Those are 2 different
> lines in the header. I'm not sure, but I think "return-path" is set
> by the smtp-server,
1.) No. 'Return-Path' is set by Sender too. Directly or indirectly, but
it is.
2.) Have a look at headers of _exactly this_ e-mail. It's 'Return-Path:'
is quiet different from it's 'From:', albeit both are the very same
when this message leaves my computer.
The reason is simple: the mailinglist software resets the
Return-Path to make an useable bounce-handling possible.
Because of the different Return-Path bounces should go to the list
server which handles the bounces and, if necessary, unsubscribes the
bouncer, or sets him/her to vacation.
So a comparison on 'Return-Path' != 'From' should only be done _after_
all subscribed mailinglists (and newsletters) are already filtered and
can't be cachted by that filter anymore ... Of course this ain't
'important' at the moment as TB! is (in current version) not capable to
compare two header entries against each other in _filter section_ (as
Roelof already stated).
--
Pit
________________________________________________
Current version is 1.61 | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html
