anti-phishing ruleset, still no cigar

Mark Nienberg mark at TIPPINGMAR.COM
Wed Nov 17 22:35:53 GMT 2004

On 17 Nov 2004 at 15:03, Jeff A. Earickson wrote:
> I'm beating my head against the wall on this anti-phishing ruleset.  The
> email gets actually sent from, with a "from" line of colby, like
> so (from the mail headers):

The "From" in this case is the "envelope-from".  Have a look at the header "X-
MailScanner-From" to see what that is.

Also, all of the examples in the rules/README file are like this:


I'm not sure if that is necessary or not.
Mark W. Nienberg, SE
Tipping Mar + associates
1906 Shattuck Ave
Berkeley, CA 94704
510 549-1906 ext 236

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ ( and
the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list