On Thu, 2009-03-05 at 21:31 +0800, Adi Nugroho wrote: > I found that a lot of spam is using recipient email address as the sender. > (from a...@internux.co.id to a...@internux.co.id, or from i...@apache.org to > i...@apache.org). > The only disadvantage is that you'll label test messages as spam.
> Since if we mail to our self, usually we have very low score, I hope it is > save to give a BIG score (probably 2 or 3). > > Is there a hint how to make this custom rule set? > Use a meta rule: describe SELF Trap mail with forged sender the same as recipient header SELF From =~ /\...@my.address/i header SELF To =~ /\...@my.address/i meta SELF 5.0 This will work for a domain where internal mail is *not* scanned by SA. Martin
