Can the null address be specified in a ruleset?

[Jim Holland]

On Tue, 18 Apr 2006, John Rudd wrote:

> Be careful, you're required by RFC (I forget which one) to treat <> as a
> valid address (it essentially means
> "MAILER-DAEMON at the.originating.host", and the reason yours is being
> inserted is probably that your MTA is qualifying and canocializing and
> such).  I don't know if the RFC-Ignorant RBL has a case for people who
> reject <> or not, but it wouldn't surprise me.

We are only trying to block mail from the null address to this particular 
user who is being bombarded by these junk notices.  I don't think anyone 
would complain about taking action to protect yourself!  Of course we are 
normally quite happy to accept mail from <> as it is the standard way of
avoiding bounce loops.

> You might try mimedefang (a milter).  It gives you lots of functionality
> you can use to reject or discard (quietly) messages at different stages
> of the transaction.  You need to know perl, though (you basically have
> to write the handling code for each stage).
 
Thanks for the tip.
 
> On Apr 18, 2006, at 2:32 PM, Jim Holland wrote:
> 
> > Hi Julian
> >
> > I have a user who is receiving numerous erroneous bounces of "cleaned"
> > viruses from a large local ISP.  The viruses are spoofing her address.
> > The envelope sender address according to the log file is the null 
> > address
> > <>, although when received by the user it has the envelope address
> > MAILER-DAEMON at mango.zw that is added by our own system (mango.zw) after
> > receipt.  I have tried the following in spam.blacklist.rules:
> >
> > 	From:   <> and To: user at mango.zw          yes
> > and
> > 	From:   MAILER-DAEMON at mango.zw and To: user at mango.zw          yes
> >
> > but, not surprisingly, neither of these work.  Can you suggest any way 
> > to
> > make such a rule work?  Or would it need to be a new feature?  I do 
> > think
> > it would be very useful to be able to use <> if it cannot be done at 
> > the
> > moment.
> >
> > I am not using SpamAssassin (don't have enough horsepower) so cannot 
> > use
> > that.  And I don't want to block other mail from the major local ISP 
> > that
> > is sending this junk.
> >
> > For the moment I will just try getting them on the phone once more . . 
> > .
> >
> > Regards
> >
> > Jim Holland
> > System Administrator
> > MANGO - Zimbabwe's non-profit e-mail service
> >
> > -- 
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> 
> 

Regards

Jim Holland
System Administrator
MANGO - Zimbabwe's non-profit e-mail service