UCE Sneaking in on our whitelist... How to stop [SCANNED]

[Alex Neuman]

You could even whitelist "From: yourip and From: yourdomain", and blacklist
"from: yourdomain". That way spoofing wouldn't work - except you wouldn't be
able to support users from outside your own network. If this works for you,
give it a shot.

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of David Thurman
Sent: Tuesday, June 15, 2004 7:51 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: UCE Sneaking in on our whitelist... How to stop [SCANNED]

On 6/15/04 7:40 AM, "Randal, Phil" wrote:

>> Thanks, I will add some additional RBL's, but even with
>> those, they are sending as our addresses, won't that give
>> them an auto -100? Or should we lower the whitelist score?
>
> You'll hate me for saying this, but you shouldn't be whitelisting
> your own email addresses.  Seeing as how every man and his spambot
> (and virusbot) uses them for nefarious purposes, it seems a silly
> thing to do.
 Phil,

I am now starting to realize that. They say if you don't learn something new
from your mistakes you aren't alive. My best lessons are my mistakes.

Thanks guys.
--
David Thurman
The Web Presence Group
http://www.the-presence.com
Web Development/E-Commerce/CMS/Hosting/Dedicated Servers
800-399-6441/309-679-0774

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html