Same FROM and TO

[Roger Jochem]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Thanks!

That would do the trick!

----- Original Message -----
From: "Matt Kettler" <mkettler at EVI-INC.COM>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, November 02, 2004 7:06 PM
Subject: Re: Same FROM and TO


> At 03:52 PM 11/2/2004, Michele Neylon : Blacknight Solutions wrote:
> > > ---------------------
> > > From: abc at xyz.com.br
> > > To: abc at xyz.com.br
> > > {bcc: me}
> > >
> > > Buy this stuff...
> > > ---------------------
> > >
> > > I hope I was clear explaining myself. Any ideas of how I could stop
> > this stuff?
> > >
> >You might want to look at SPF
>
> SPF is a good start, although that only happens to be true if you run
> xyz.com.br.
>
> Another option is one of the spamassassin rules: FROM_AND_TO_SAME. Just
> jack it up with a score statement.
>
> However, be aware that it's incredibly common for nonpsam messages to hit
> this rule.. Especially logwatch and other cronjob type system reports
which
> tend to be from and to root at example.com.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).