What causes this type of address in envelopes? - how to whitelist!

[Glenn Steen]

On 02/10/2007, Quentin Campbell <Q.G.Campbell at newcastle.ac.uk> wrote:
> >-----Original Message-----
> >From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> >bounces at lists.mailscanner.info] On Behalf Of Glenn Steen
> >Sent: 29 September 2007 11:53
> >To: MailScanner discussion
> >Subject: Re: What causes this type of address in envelopes?
> >
> >On 28/09/2007, Steve Campbell <campbell at cnpapers.com> wrote:
> >> OK, thanks to all.
> >>
> >> It's sort of a problem in that it's not that easy to whitelist with
> >>that type of address, I'm not sure it they only have one server or IP
> >>they send from. It's clunky in my opinion.
> >
> >Yes, it is..... So going for IP as whitelist criterion is probably
> >your only safe bet. Perhaps you should take it up _with the
> >sender_...?
> >
> [snip]
>
> You can reliably whitelist PRVS addresses using a regular expression.
> Using the address example from Steve's original message,
> prvs=somebody=7848db996 at somedomain.com, your entry in the
> spam.whitelist.rules file for that address would be:
>
> From:   /prvs=somebody=.*\@somedomain\.com$/     yes
>
Except that this still is very spoofable...:-).

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se