Nick Rout wrote:
So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in error).
Return-Path is usually added by the receiving system, and contains the envelope sender of the message. So effectively, it's set by the sender.
It can legitimately disagree with the value in the From header. A perfect example would be this message right here. From will contain my email address, but Return-Path will contain an address managed by the mailing list software at spamassassin.apache.org
-- Kelson Vibber SpeedGate Communications <www.speed.net>
