John D. Hardin wrote: > On Sat, 10 Feb 2007, Matt Kettler wrote: > > >> In particular, make sure you didn't do anything like the common >> mistake of "whitelist_from [EMAIL PROTECTED]". Any spammer can >> trivially forge a From: or Return-Path header, and forging your >> own domain in these fields is a common tactic because spammers >> know many people make this mistake. >> > > Perhaps --lint should warn about whitelist_from being used at all... >
Or at least warn if you haven't set an option: yes_i_understand_whitelist_from_sucks 1 After all, generating a lint warning will mess up folks who use RDJ.. there should be a way to disable the warning for people who really have no other option. (otherwise they'd just remove the damn thing.)