Same FROM and TO

[Michele Neylon : Blacknight Solutions]

On Tue, 2004-11-02 at 16:06 -0500, Matt Kettler wrote:

> > >
> >You might want to look at SPF
>
> SPF is a good start, although that only happens to be true if you run
> xyz.com.br.

Which I thought was the case :)

>
> Another option is one of the spamassassin rules: FROM_AND_TO_SAME. Just
> jack it up with a score statement.
>
> However, be aware that it's incredibly common for nonpsam messages to hit
> this rule.. Especially logwatch and other cronjob type system reports which
> tend to be from and to root at example.com.

Which is why whitelisting root at someserveronyournetwork is not a bad idea

Of course there are downsides to that as well .....

--
Mr Michele Neylon
Blacknight Solutions
http://www.blacknight.ie
059 9137101

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).