How to block emails from some of yahoogroups but not all

[Glenn Steen]

On 06/06/06, Budi Febrianto <febrianto at sioenasia.com> wrote:
>
>
> mailscanner-bounces at lists.mailscanner.info wrote on 06/05/2006 05:38:45 PM:
>
> > On 05/06/06, Budi Febrianto <febrianto at sioenasia.com> wrote:
> > >
> > > Dear All,
> > >
> > > Just join this group, and the two emails from mailscanner.info (confirm
> and
> > > welcome) tagged as spam :). Have manually added mailscanner.info as
> > > whitelist. :).
> > >
> > > Lot's of my users join the yahoogroups. It's not a problem, but... my
> > > management want me to block emails from yahoogroups that contains that
> are
> > > not allowed, like porn.
> > >
> > > So I like to block emails from abc of yahoogroups.
> > > I tried to simply blacklist emails from abc at yahoogroups.com, but it
> didn't
> > > work.  Should I put it in SA as new rules? Any examples?
> > >
> > > Best Regards
> > >
> > Budi, look at the thread "Listserv whitelisting: Reply-to header
> > field? " ... You get the idea:-).
> >
> > Hmmm, gmane seem to be down, so you'll have to rely on
> > http://lists.mailscanner.info/pipermail/mailscanner/2006-June/thread.html
> > ... whioch doesn't seem to thread that well... Oh well.
> >
> > --
> > -- Glenn
> > email: glenn < dot > steen < at > gmail < dot > com
> > work: glenn < dot > steen < at > ap1 < dot > se
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
>       Dear Glenn,
>       Thanks for the reply.
>       I check the MailScanner.conf and found out that Add Envelope From
> Header allready set to yes.
>
>       ===MailScanner.conf===
>       Add Envelope From Header = yes
>       Add Envelope To Header = no
>       Envelope From Header = X-%org-name%-MailScanner-From:
>       ===
>
>       But I don't see any header in my emails with the tag like
> X-myorgname-MailScanner-From:, is that a problem?
>
>       I tried added To:, From: and even Reply-To: in spam.whitelist.rules,
> nothing is work. (before doing it in spam.blacklist.rules... better try it
> in whitelist first)
>
>       Am I missing something?
>
You can see the envelope sender in your MTAs logfile. The headers are
often "forged" on "legitimate" lists too, so are no help at all. In
that log you'll see the actual sending servers IP address too.
If you run MailWatch (which I think you do), the envelope sender and
IP is very prominently visible... And you can also easily see if the
headers differ from what is actually used (in the details page).

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se