Check spam when from and to are same.

[mikea]

On Wed, Mar 24, 2010 at 09:10:04AM -0500, Santiago Hoyos wrote:
> Hi every all,
> 
> My mail system is getting a lot of spam where the from and to is the same
> and the filters are not what is stopping.
> 
> Any idea to solve this problem?

I screen mail for that using rules that check the originating relay and the
"From:" address. If the "From:" address is in one of our domains and the
originating relay isn't one of our outbound mailers, then the mail fails.
That works for us because I know all the outbound mailer IP addresses, but
it does occasionally fail mail from the New York Times and other sites
which forge the "From:" address when snding articles from their website.

-- 
Mike Andrews, W5EGO
mikea at mikea.ath.cx
Tired old sysadmin