SPAM by same email as recipient?

Martin Hepworth maxsec at gmail.com
Mon Oct 14 12:46:21 IST 2013


Also do NOT whitelist the domains you serve in MailScanner.conf (is
definitely not spam) or spamassassin

Also having the list of any rules hit is always useful in the headers so
you can see why it's getting through.. (or not)

I always add the SA info into email headers to see what the score and rule
hits are ( helps with debug), in MailScanner.conf make sure the follow are
set thus:

Spam Score Number Format = %5.2f

Detailed Spam Report = yes

Include Scores In SpamAssassin Report = yes

Always Include SpamAssassin Report = yes

Spam Score Number Format = %5.2f


-- 
Martin Hepworth, CISSP
Oxford, UK


On 14 October 2013 07:14, John Wilcock <john at tradoc.fr> wrote:

> Le 13/10/2013 23:33, Rodney Mitchell a écrit :
> > If the email is <testing at melecom.com.au> many spam emails come into the
> > INBOX and they are from <testing at melecom.com.au>, any suggestions?
>
> By far the best solution is to configure your SMTP server not to accept
> unauthenticated mail from domains that it serves.
>
> If this isn't possible in your setup, have a look at the __TO_EQ_FROM
> rule in the standard ruleset. This is only used in other meta rules, but
> you could experiment with scoring it, making sure you exclude any
> genuine messages that you might send to yourself, for example:
> meta TO_EQ_FROM_UNTRUSTED       meta    __TO_EQ_FROM && !ALL_TRUSTED
>
> John.
>
> --
> -- Over 5000 webcams from ski resorts around the world - www.snoweye.com
> -- Translate your technical documents and web pages    - www.tradoc.fr
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131014/17d6f8a7/attachment.html 


More information about the MailScanner mailing list