On Wed, 2014-06-18 at 17:33 +0200, Toni Schornböck wrote: > Basically my problem is the following: TheCompany is a business partner of > ours but we get lots of spam mail that claims to be from TheCompany. So > sometimes a correct mail gets caught up in my spamfilter because > spamassassin has a hard time to distinguish between real mails from > TheCompany and fake spam mails that only claim to be from TheCompany. I > know dkim and Co would solve this problem, but I can't do anything on my > end. > > So I want to downscore mails from their specific Mailserver. Is this > somehow possible without entirely relying on fakable email headers? > Can you persuade them to run SPF configured to publish their list of IP(s) and use the -all mechanism? That would allow your SA set-up to check that mail is from them.
It would also be a low-cost, simple thing for them to do, since all that is needed is to add an SPF record to the DNS server(s) that are definitive for their domain. Martin