Matt Kettler wrote:

>Philip Prindeville wrote:
>  
>
>>Matt Kettler wrote:
>>
>>    
>>
>>>Philip Prindeville wrote:
>>> 
>>>
>>>      
>>>
>>>>I was noticing that every time that someone forwards me an
>>>>article from yahoo! news that it scores high on the
>>>>MANY_EXCLAMATIONS and PLING_PLING tests.
>>>>
>>>>Unfortunately Yahoo! also changed the policy about generating
>>>>the MAIL FROM: line.  It used to be that of the person sending
>>>>to you.  Now it's some long unique id:
>>>>
>>>><[EMAIL PROTECTED]>
>>>>
>>>>That can't be whitelisted...  Grrr...
>>>>   
>>>>
>>>>        
>>>>
>>>Well, it can be whitelisted in SA. However, since you've mentioned this 
>>>before,
>>>and I pointed out a solution, you apparently aren't using SA to do your
>>>whitelisting.
>>> 
>>>
>>>      
>>>
>>I'm prepared to whitelist the sender.  Not all 8 gazillion yahoo users.
>>
>>Unfortunately, the true sender is only exposed in the From: line in
>>the message header.  Not in the envelope.
>>    
>>
>
>
>Wait.. All you want to do is whitelist one specific person?
>
>Just whitelist them.. SA sees *both* the From: header AND the Return-Path 
>header
>when evaluating "whitelist_from" type commands.
>  
>

The sender was already whitelisted...  Or so I thought.  I'll have to
double-check that.  She tends to use a lot of different emailboxes.

Since the From: header is easily forged, isn't this a weakness/liability?

-Philip

Reply via email to