Same FROM and TO

[Matt Kettler]

At 03:52 PM 11/2/2004, Michele Neylon : Blacknight Solutions wrote:
> > ---------------------
> > From: abc at xyz.com.br
> > To: abc at xyz.com.br
> > {bcc: me}
> >
> > Buy this stuff...
> > ---------------------
> >
> > I hope I was clear explaining myself. Any ideas of how I could stop
> this stuff?
> >
>You might want to look at SPF

SPF is a good start, although that only happens to be true if you run
xyz.com.br.

Another option is one of the spamassassin rules: FROM_AND_TO_SAME. Just
jack it up with a score statement.

However, be aware that it's incredibly common for nonpsam messages to hit
this rule.. Especially logwatch and other cronjob type system reports which
tend to be from and to root at example.com.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).