On Thursday 03 August 2006 11:02 pm, Mathias Homann wrote:
> ohw can it be that the attached spam got through... the SA report
> says "user in whitelist", thus it gave the spam a really high
> negative score. How can that be, or rather, how can i stop it?

Looks like they used the same address for both the envelope sender and the 
recipient ([EMAIL PROTECTED]).  This is easy to do, and more common than you 
might think.

> Return-Path: <[EMAIL PROTECTED]>
...
> To: [EMAIL PROTECTED]

Simple answer: don't whitelist your own address.  Some spammers will do this 
deliberately, hoping it will get them past filters.

-- 
Kelson Vibber
SpeedGate Communications, <www.speed.net>

Reply via email to