Whitelisting problem

[Matt Kettler]

If you're using SpamAssassin 2.40 or higher under MailScanner, you can
always use SpamAssassin's "whitelist_from_rcvd" feature. This requires a
match of both a from: line and a recieved: line prior to being whitelisted.

ie:

whitelist_from_rcvd     mkettler at evi-inc.com
208-39-141-94.isp.comcastbusiness.net


At 11:50 AM 1/7/2003 -0500, Derek Winkler wrote:

>IBM is a partner of ours so I have whitelisted ibm.com
>
>But now some spammer is forging both the envelope and header to look like
>it cam from ibm.com
>
>The spammer appears to be creating random addresses ending in @ibm.com
>
>Is my only choice to remove ibm.com from the whitelist?
>
>Thanks,
>
>Derek Winkler
>Security Administrator
>Algorithmics Inc., Toronto
>Tel: (416) 217-4107
>Fax: (416) 971-6263
>www.algorithmics.com